--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"debug","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"debug","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"debug","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"debug","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"debug","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"error","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"error","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53470","PortSpecifier":{"PortValue":53470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3008948-3930-4fb7-86d9-59c631d86e4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53470","PortSpecifier":{"PortValue":53470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590490,"nanos":290981721},"http":{"id":"f3008948-3930-4fb7-86d9-59c631d86e4a","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/auth-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3008948-3930-4fb7-86d9-59c631d86e4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60448","PortSpecifier":{"PortValue":60448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60448","PortSpecifier":{"PortValue":60448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590490,"nanos":346471547},"http":{"id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/auth-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b50c8e5b-e6cb-4947-b5ac-6b251396cc80","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60460","PortSpecifier":{"PortValue":60460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:60460","PortSpecifier":{"PortValue":60460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590490,"nanos":388408109},"http":{"id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","method":"GET","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17CBdruUArtnzmwty_Qc4G4TGNl3vVUisa3e5X9coyFQamvhP9IQaVbVE34WP"} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17CBdruUArtnzmwty_Qc4G4TGNl3vVUisa3e5X9coyFQamvhP9IQaVbVE34WP\"}"} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-20T23:34:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c69a139-38a6-43ab-a49d-743c7a6daf5a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-20T23:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"error","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"error","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"error","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42510","PortSpecifier":{"PortValue":42510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42510","PortSpecifier":{"PortValue":42510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590509,"nanos":515694053},"http":{"id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/auth-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d35235a8-1688-45ef-a47e-5f87c7b7b682","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45622","PortSpecifier":{"PortValue":45622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45622","PortSpecifier":{"PortValue":45622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590509,"nanos":550165803},"http":{"id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/auth-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8392e288-8cf2-43e9-a504-bf65d2c2add0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42512","PortSpecifier":{"PortValue":42512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42512","PortSpecifier":{"PortValue":42512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590509,"nanos":603492611},"http":{"id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/auth-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbb585cc-1b38-49d5-9a16-e5f26fb4d791","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45636","PortSpecifier":{"PortValue":45636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45636","PortSpecifier":{"PortValue":45636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590509,"nanos":636293818},"http":{"id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/auth-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12ed8713-a50d-4a2c-9e31-4898ddac456e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"debug","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"error","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"error","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"error","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"info","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36526","PortSpecifier":{"PortValue":36526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a419caac-5875-43c7-99e7-8f8288d9ebea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36526","PortSpecifier":{"PortValue":36526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590528,"nanos":814027107},"http":{"id":"a419caac-5875-43c7-99e7-8f8288d9ebea","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/auth-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a419caac-5875-43c7-99e7-8f8288d9ebea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a87284fb-5e98-4571-80ec-881a19437434","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51962","PortSpecifier":{"PortValue":51962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a87284fb-5e98-4571-80ec-881a19437434","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a87284fb-5e98-4571-80ec-881a19437434","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51962","PortSpecifier":{"PortValue":51962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590528,"nanos":847814072},"http":{"id":"a87284fb-5e98-4571-80ec-881a19437434","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a87284fb-5e98-4571-80ec-881a19437434","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a87284fb-5e98-4571-80ec-881a19437434","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a87284fb-5e98-4571-80ec-881a19437434","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a87284fb-5e98-4571-80ec-881a19437434","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a87284fb-5e98-4571-80ec-881a19437434","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a87284fb-5e98-4571-80ec-881a19437434","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/auth-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a87284fb-5e98-4571-80ec-881a19437434","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a87284fb-5e98-4571-80ec-881a19437434","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a87284fb-5e98-4571-80ec-881a19437434","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a87284fb-5e98-4571-80ec-881a19437434","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a87284fb-5e98-4571-80ec-881a19437434","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e97591ba-322c-4851-8eb6-f33870e27968","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51970","PortSpecifier":{"PortValue":51970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e97591ba-322c-4851-8eb6-f33870e27968","method":"GET","path":"/maas-api/v1/api-keys/f67d6689-830a-4a00-8ad4-2cf933d60d61","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e97591ba-322c-4851-8eb6-f33870e27968","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51970","PortSpecifier":{"PortValue":51970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590528,"nanos":886672015},"http":{"id":"e97591ba-322c-4851-8eb6-f33870e27968","method":"GET","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f67d6689-830a-4a00-8ad4-2cf933d60d61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e97591ba-322c-4851-8eb6-f33870e27968","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e97591ba-322c-4851-8eb6-f33870e27968","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e97591ba-322c-4851-8eb6-f33870e27968","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f67d6689-830a-4a00-8ad4-2cf933d60d61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e97591ba-322c-4851-8eb6-f33870e27968","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e97591ba-322c-4851-8eb6-f33870e27968","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e97591ba-322c-4851-8eb6-f33870e27968","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/auth-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e97591ba-322c-4851-8eb6-f33870e27968","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e97591ba-322c-4851-8eb6-f33870e27968","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e97591ba-322c-4851-8eb6-f33870e27968","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e97591ba-322c-4851-8eb6-f33870e27968","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e97591ba-322c-4851-8eb6-f33870e27968","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85d52559-0641-4e64-940d-0b175de49de0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36528","PortSpecifier":{"PortValue":36528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85d52559-0641-4e64-940d-0b175de49de0","method":"GET","path":"/maas-api/v1/api-keys/f67d6689-830a-4a00-8ad4-2cf933d60d61","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85d52559-0641-4e64-940d-0b175de49de0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36528","PortSpecifier":{"PortValue":36528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590528,"nanos":916998068},"http":{"id":"85d52559-0641-4e64-940d-0b175de49de0","method":"GET","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f67d6689-830a-4a00-8ad4-2cf933d60d61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85d52559-0641-4e64-940d-0b175de49de0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85d52559-0641-4e64-940d-0b175de49de0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85d52559-0641-4e64-940d-0b175de49de0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f67d6689-830a-4a00-8ad4-2cf933d60d61",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85d52559-0641-4e64-940d-0b175de49de0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85d52559-0641-4e64-940d-0b175de49de0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85d52559-0641-4e64-940d-0b175de49de0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/auth-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85d52559-0641-4e64-940d-0b175de49de0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85d52559-0641-4e64-940d-0b175de49de0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85d52559-0641-4e64-940d-0b175de49de0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85d52559-0641-4e64-940d-0b175de49de0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85d52559-0641-4e64-940d-0b175de49de0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"info","ts":"2026-07-20T23:35:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"error","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"error","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"info","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:35:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:35:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:35:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41426","PortSpecifier":{"PortValue":41426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16167029-d8bd-4fe9-8c07-3e58d423c630","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41426","PortSpecifier":{"PortValue":41426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590545,"nanos":951111552},"http":{"id":"16167029-d8bd-4fe9-8c07-3e58d423c630","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/auth-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16167029-d8bd-4fe9-8c07-3e58d423c630","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45114","PortSpecifier":{"PortValue":45114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45114","PortSpecifier":{"PortValue":45114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590545,"nanos":986349979},"http":{"id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/auth-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ddf8714-f145-4b1d-8b62-3c57bb9562fa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41442","PortSpecifier":{"PortValue":41442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7f03a41-ce77-4e16-9001-f54734630a0d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41442","PortSpecifier":{"PortValue":41442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590546,"nanos":22442519},"http":{"id":"e7f03a41-ce77-4e16-9001-f54734630a0d","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PKktHlatgdM06SeC_KtncbgDuYhnG67jtN16sL1nmVLTSOXygdJCksBTmHLP"} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PKktHlatgdM06SeC_KtncbgDuYhnG67jtN16sL1nmVLTSOXygdJCksBTmHLP\"}"} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b88ecb4f-8c91-4118-a11d-697f91200d86","keyName":"e2e-auth-iso-a-bd6578","subscription":"e2e-auth-iso-2ceb3e","tenant":"e2e-shared-a-107ae7","userId":"b88ecb4f-8c91-4118-a11d-697f91200d86","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/auth-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-2ceb3e"} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:35:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f03a41-ce77-4e16-9001-f54734630a0d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e364559b4d2fd2461f46ca52ba016d2493daf48f5cfa8e7970f28cb50bf823be"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eba18158922b59109db7078aa6bd242f6d3be9991290ac62a4221bd05ca2e09f"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0855d43a5569c2f408a1b7e3133507513f25551681c0ec2f5b25b55e456c232f"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b85e283e279f11f83bc013b5a3cdfc56e597c31d73e00cbe13b1eb28b8f106f"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cb61839e89b59004a47a6c70871dc8aa1debfcc91a119b3ab8c710f634da7f7"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64549bcf4d26a71db40f4496860a50350d491e0875afd88e63f239242359e327"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17692b455ae638f90f4a67708838ed59007e01017c1e56f8db707e1b1c6e051a"} {"level":"info","ts":"2026-07-20T23:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092d7fd78063e2887c00de152288deace305e78047b177bc316e0402f4e6135b"} {"level":"info","ts":"2026-07-20T23:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59582f73ddee5a57ab2c824a51c57917018f67576f4e684fc71f90f03b330825"} {"level":"info","ts":"2026-07-20T23:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eae0ab587e3306f15ad2007d5fb3a081348530b939ac2b117a9f12d7592ac9a1"} {"level":"info","ts":"2026-07-20T23:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3b2627728e620df7eb8cd2712c30ad4624e0128c09eda5936d6fbbfa04e6155"} {"level":"info","ts":"2026-07-20T23:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e92d021df6935858a516297878cbc14fdf7f639ad243c663f08b015836dd045"} {"level":"info","ts":"2026-07-20T23:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2623bb11d3d1a7beab7cff6004b61324ba050a18d7dbc1a25f77fae22183fb8a"} {"level":"info","ts":"2026-07-20T23:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a021fc37464e5063aa450e48d9e3f6decec0fe037d03a9eb99bf04188a982b5"} {"level":"info","ts":"2026-07-20T23:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74185bf431b4131f9f8d11498101accf6793db86b8402750a098128b8dc309a7"} {"level":"info","ts":"2026-07-20T23:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caac458c432dca0ecec5974f52584c74413ca3fd63578a9adab74d0f9ee05911"} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5"} {"level":"info","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b"} {"level":"error","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75"} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:36:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0849de4a9cc567f700cd2a9e152dd021aa0a3bceba7b3f680f04b2c830ac393f"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/739b563b4d10b502017db1f220e8cbec51f889bcef647e5c76090bcf2e581116"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec93a387c2668c86f1e912d9d26f7c95235a27d9f368034700fdc5d0ae9bb81d"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9cd39b6750a7fd7d0c0f41289b2ba8daabeb8df490745572b39ea2e359781c"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0849de4a9cc567f700cd2a9e152dd021aa0a3bceba7b3f680f04b2c830ac393f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0849de4a9cc567f700cd2a9e152dd021aa0a3bceba7b3f680f04b2c830ac393f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f7ce36d61555477505cd65e56a704a8ed3d5330c7a2e85c44ab58f0595408c6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0849de4a9cc567f700cd2a9e152dd021aa0a3bceba7b3f680f04b2c830ac393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"739b563b4d10b502017db1f220e8cbec51f889bcef647e5c76090bcf2e581116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["739b563b4d10b502017db1f220e8cbec51f889bcef647e5c76090bcf2e581116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8694095cfac7f2e0a80384c0e4a7953b7d00de523f6084e85489fe8097544a9d"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"739b563b4d10b502017db1f220e8cbec51f889bcef647e5c76090bcf2e581116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec93a387c2668c86f1e912d9d26f7c95235a27d9f368034700fdc5d0ae9bb81d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec93a387c2668c86f1e912d9d26f7c95235a27d9f368034700fdc5d0ae9bb81d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6952a534deb97394d4121308df2de81fbee88032211f2b7511e19c41ebedb6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec93a387c2668c86f1e912d9d26f7c95235a27d9f368034700fdc5d0ae9bb81d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9cd39b6750a7fd7d0c0f41289b2ba8daabeb8df490745572b39ea2e359781c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9cd39b6750a7fd7d0c0f41289b2ba8daabeb8df490745572b39ea2e359781c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0849de4a9cc567f700cd2a9e152dd021aa0a3bceba7b3f680f04b2c830ac393f"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbc5135f90ef723de9229e7e24ebf47fe668ecbb8c7ff3b384985918540e3de6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1726c561a2d4a512a38245ce49b0c5ecb7555a68f8850c676fa5e779c572dce6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9cd39b6750a7fd7d0c0f41289b2ba8daabeb8df490745572b39ea2e359781c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f7ce36d61555477505cd65e56a704a8ed3d5330c7a2e85c44ab58f0595408c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f7ce36d61555477505cd65e56a704a8ed3d5330c7a2e85c44ab58f0595408c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/739b563b4d10b502017db1f220e8cbec51f889bcef647e5c76090bcf2e581116"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec93a387c2668c86f1e912d9d26f7c95235a27d9f368034700fdc5d0ae9bb81d"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f7ce36d61555477505cd65e56a704a8ed3d5330c7a2e85c44ab58f0595408c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8694095cfac7f2e0a80384c0e4a7953b7d00de523f6084e85489fe8097544a9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8694095cfac7f2e0a80384c0e4a7953b7d00de523f6084e85489fe8097544a9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8694095cfac7f2e0a80384c0e4a7953b7d00de523f6084e85489fe8097544a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9cd39b6750a7fd7d0c0f41289b2ba8daabeb8df490745572b39ea2e359781c"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f7ce36d61555477505cd65e56a704a8ed3d5330c7a2e85c44ab58f0595408c6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8694095cfac7f2e0a80384c0e4a7953b7d00de523f6084e85489fe8097544a9d"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6952a534deb97394d4121308df2de81fbee88032211f2b7511e19c41ebedb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6952a534deb97394d4121308df2de81fbee88032211f2b7511e19c41ebedb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6952a534deb97394d4121308df2de81fbee88032211f2b7511e19c41ebedb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0849de4a9cc567f700cd2a9e152dd021aa0a3bceba7b3f680f04b2c830ac393f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbc5135f90ef723de9229e7e24ebf47fe668ecbb8c7ff3b384985918540e3de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbc5135f90ef723de9229e7e24ebf47fe668ecbb8c7ff3b384985918540e3de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6952a534deb97394d4121308df2de81fbee88032211f2b7511e19c41ebedb6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbc5135f90ef723de9229e7e24ebf47fe668ecbb8c7ff3b384985918540e3de6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1726c561a2d4a512a38245ce49b0c5ecb7555a68f8850c676fa5e779c572dce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:36:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1726c561a2d4a512a38245ce49b0c5ecb7555a68f8850c676fa5e779c572dce6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbc5135f90ef723de9229e7e24ebf47fe668ecbb8c7ff3b384985918540e3de6"} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1726c561a2d4a512a38245ce49b0c5ecb7555a68f8850c676fa5e779c572dce6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"739b563b4d10b502017db1f220e8cbec51f889bcef647e5c76090bcf2e581116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec93a387c2668c86f1e912d9d26f7c95235a27d9f368034700fdc5d0ae9bb81d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9cd39b6750a7fd7d0c0f41289b2ba8daabeb8df490745572b39ea2e359781c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f7ce36d61555477505cd65e56a704a8ed3d5330c7a2e85c44ab58f0595408c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8694095cfac7f2e0a80384c0e4a7953b7d00de523f6084e85489fe8097544a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6952a534deb97394d4121308df2de81fbee88032211f2b7511e19c41ebedb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbc5135f90ef723de9229e7e24ebf47fe668ecbb8c7ff3b384985918540e3de6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1726c561a2d4a512a38245ce49b0c5ecb7555a68f8850c676fa5e779c572dce6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1726c561a2d4a512a38245ce49b0c5ecb7555a68f8850c676fa5e779c572dce6"} {"level":"info","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57500","PortSpecifier":{"PortValue":57500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9b57257-c880-4c05-962a-47b3f7741af2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57500","PortSpecifier":{"PortValue":57500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590616,"nanos":294886453},"http":{"id":"c9b57257-c880-4c05-962a-47b3f7741af2","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/sub-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9b57257-c880-4c05-962a-47b3f7741af2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41758","PortSpecifier":{"PortValue":41758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41758","PortSpecifier":{"PortValue":41758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590616,"nanos":331910147},"http":{"id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/sub-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"155fb38d-b4c8-414e-a0a6-303ca19ab8e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"828fa8c8-493a-48df-9120-73b04cad0666","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57508","PortSpecifier":{"PortValue":57508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"828fa8c8-493a-48df-9120-73b04cad0666","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"828fa8c8-493a-48df-9120-73b04cad0666","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57508","PortSpecifier":{"PortValue":57508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590616,"nanos":364729922},"http":{"id":"828fa8c8-493a-48df-9120-73b04cad0666","method":"GET","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sF0dqVbGDfhVjRcH_CV5oI6CArCmARGzopAgEVDLjwcO8A8nqYTAyPmpkIEA"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sF0dqVbGDfhVjRcH_CV5oI6CArCmARGzopAgEVDLjwcO8A8nqYTAyPmpkIEA\"}"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1008122f-9594-480d-a92d-87782a914d8d","keyName":"e2e-sub-iso-94c5f7","subscription":"e2e-a-only-5adbd8","tenant":"e2e-shared-a-107ae7","userId":"1008122f-9594-480d-a92d-87782a914d8d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"828fa8c8-493a-48df-9120-73b04cad0666","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/sub-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"828fa8c8-493a-48df-9120-73b04cad0666","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5adbd8"} {"level":"info","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"828fa8c8-493a-48df-9120-73b04cad0666","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"828fa8c8-493a-48df-9120-73b04cad0666","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41772","PortSpecifier":{"PortValue":41772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41772","PortSpecifier":{"PortValue":41772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590616,"nanos":403475443},"http":{"id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","method":"GET","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ObAPBJxO9xku3W65_WHZBQ5YRbexP7xgmiVZb7R0chKPHsMVWpUR015BVVJS"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ObAPBJxO9xku3W65_WHZBQ5YRbexP7xgmiVZb7R0chKPHsMVWpUR015BVVJS\"}"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"77850669-84c6-458e-b676-3373f0744d89","keyName":"e2e-sub-iso-2632ce","subscription":"e2e-b-only-5adbd8","tenant":"e2e-shared-b-5b9afe","userId":"77850669-84c6-458e-b676-3373f0744d89","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/sub-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5adbd8"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:36:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55e71095-ef0d-4070-b6ea-9aa6e11369a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52254","PortSpecifier":{"PortValue":52254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52254","PortSpecifier":{"PortValue":52254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590626,"nanos":281138374},"http":{"id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/sub-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75fdc9e5-4441-471a-b6b2-df8fd587167d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9066166-150f-4988-b94e-42e66481b04a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55592","PortSpecifier":{"PortValue":55592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9066166-150f-4988-b94e-42e66481b04a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9066166-150f-4988-b94e-42e66481b04a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55592","PortSpecifier":{"PortValue":55592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590626,"nanos":312530682},"http":{"id":"f9066166-150f-4988-b94e-42e66481b04a","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9066166-150f-4988-b94e-42e66481b04a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9066166-150f-4988-b94e-42e66481b04a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9066166-150f-4988-b94e-42e66481b04a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9066166-150f-4988-b94e-42e66481b04a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9066166-150f-4988-b94e-42e66481b04a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9066166-150f-4988-b94e-42e66481b04a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/sub-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9066166-150f-4988-b94e-42e66481b04a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9066166-150f-4988-b94e-42e66481b04a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9066166-150f-4988-b94e-42e66481b04a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9066166-150f-4988-b94e-42e66481b04a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9066166-150f-4988-b94e-42e66481b04a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52260","PortSpecifier":{"PortValue":52260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52260","PortSpecifier":{"PortValue":52260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590626,"nanos":344999238},"http":{"id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17pL0e74Jd6GSVL8g_sU5NBGsShtWr4e9R2UnYDjZTF2PlDONoIZji4omZToz"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17pL0e74Jd6GSVL8g_sU5NBGsShtWr4e9R2UnYDjZTF2PlDONoIZji4omZToz\"}"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6f60aae8-84a5-498b-a073-cfb634ce8465","keyName":"e2e-sub-iso-c9a0ff","subscription":"e2e-shared-sub-2d2447","tenant":"e2e-shared-a-107ae7","userId":"6f60aae8-84a5-498b-a073-cfb634ce8465","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/sub-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2d2447"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"773c21a3-e2f4-48d7-9919-9c5e654a61bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9b2961-defc-4293-9381-a79fd458f724","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55608","PortSpecifier":{"PortValue":55608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc9b2961-defc-4293-9381-a79fd458f724","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc9b2961-defc-4293-9381-a79fd458f724","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55608","PortSpecifier":{"PortValue":55608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590626,"nanos":372831036},"http":{"id":"fc9b2961-defc-4293-9381-a79fd458f724","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zmVjJSXDPHBrkWtD_Y2Q1fMJBy5Hx6bLGHxFx8CUBPQiKhmfZ6TWzKIfzOAt"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zmVjJSXDPHBrkWtD_Y2Q1fMJBy5Hx6bLGHxFx8CUBPQiKhmfZ6TWzKIfzOAt\"}"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a0e4ddc-60a4-4d2f-b986-a1d604d24fb8","keyName":"e2e-sub-iso-ecc77f","subscription":"e2e-shared-sub-2d2447","tenant":"e2e-shared-b-5b9afe","userId":"8a0e4ddc-60a4-4d2f-b986-a1d604d24fb8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc9b2961-defc-4293-9381-a79fd458f724","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/sub-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2d2447"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc9b2961-defc-4293-9381-a79fd458f724","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9b2961-defc-4293-9381-a79fd458f724","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:37:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc9b2961-defc-4293-9381-a79fd458f724","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/739b563b4d10b502017db1f220e8cbec51f889bcef647e5c76090bcf2e581116"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed6952a534deb97394d4121308df2de81fbee88032211f2b7511e19c41ebedb6"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbc5135f90ef723de9229e7e24ebf47fe668ecbb8c7ff3b384985918540e3de6"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0849de4a9cc567f700cd2a9e152dd021aa0a3bceba7b3f680f04b2c830ac393f"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1726c561a2d4a512a38245ce49b0c5ecb7555a68f8850c676fa5e779c572dce6"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb8ce972d55bd264a08535ba3eca864c9b781328639a57ebef0f8370f97a406"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec93a387c2668c86f1e912d9d26f7c95235a27d9f368034700fdc5d0ae9bb81d"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43fcbd38a22630ca03d4f7aec9127b00399e3992f59c0c0b13914f8a34d061d6"} {"level":"info","ts":"2026-07-20T23:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4abd4dffd504d6345afb70a613d96b2e5301eb6638ce5ae5d190e5da70b42ed5"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac9cd39b6750a7fd7d0c0f41289b2ba8daabeb8df490745572b39ea2e359781c"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30a5b9dc19bc4602d3458947bd3ad4a8cdb4f90a822c2e17707169caa46fc98b"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/406f0d57cea6dfcae4fda4b05fa9e0c39564e64f97860c7d78903f2b1f9b3c75"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f7ce36d61555477505cd65e56a704a8ed3d5330c7a2e85c44ab58f0595408c6"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31239c1874e6864a3952bf285f732f3a903f8baba2d269225f81f6ed9a0da095"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8694095cfac7f2e0a80384c0e4a7953b7d00de523f6084e85489fe8097544a9d"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"} {"level":"info","ts":"2026-07-20T23:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa8603e750bd8cde2a888e7f66b5087a8daad014eec7d0abf8e4db9b6d1948d2"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"error","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3"} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3"} {"level":"debug","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1605985b637cc3751dd6e7adbea684074f89f0cca40c80568497d67d0073203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1605985b637cc3751dd6e7adbea684074f89f0cca40c80568497d67d0073203","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1605985b637cc3751dd6e7adbea684074f89f0cca40c80568497d67d0073203"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1605985b637cc3751dd6e7adbea684074f89f0cca40c80568497d67d0073203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1605985b637cc3751dd6e7adbea684074f89f0cca40c80568497d67d0073203"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1605985b637cc3751dd6e7adbea684074f89f0cca40c80568497d67d0073203","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1605985b637cc3751dd6e7adbea684074f89f0cca40c80568497d67d0073203","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1605985b637cc3751dd6e7adbea684074f89f0cca40c80568497d67d0073203"} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43590f9150978b84cc3647fe33b6add99a8ebc9493f94c5a2943648fab2458a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43590f9150978b84cc3647fe33b6add99a8ebc9493f94c5a2943648fab2458a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7785987c461127e6092ba3ef62f62139108f3def027850e8be34cf5dfb32116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7785987c461127e6092ba3ef62f62139108f3def027850e8be34cf5dfb32116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43590f9150978b84cc3647fe33b6add99a8ebc9493f94c5a2943648fab2458a"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b43590f9150978b84cc3647fe33b6add99a8ebc9493f94c5a2943648fab2458a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b43590f9150978b84cc3647fe33b6add99a8ebc9493f94c5a2943648fab2458a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7785987c461127e6092ba3ef62f62139108f3def027850e8be34cf5dfb32116"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b43590f9150978b84cc3647fe33b6add99a8ebc9493f94c5a2943648fab2458a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7785987c461127e6092ba3ef62f62139108f3def027850e8be34cf5dfb32116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7785987c461127e6092ba3ef62f62139108f3def027850e8be34cf5dfb32116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7785987c461127e6092ba3ef62f62139108f3def027850e8be34cf5dfb32116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e9e3856906a5b34218fa0ed5a7e46744af39ad9617091b5c6b6d6898e439877"} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b43590f9150978b84cc3647fe33b6add99a8ebc9493f94c5a2943648fab2458a"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f158530cf8d415c1a5cc215806b0629f792c5d902bc8e5f71ea1923d874f3413"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7785987c461127e6092ba3ef62f62139108f3def027850e8be34cf5dfb32116"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3d3eb5bd229a92934501386eca36572aeb5154ebe668fae9dfce155ee50ca7"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e9e3856906a5b34218fa0ed5a7e46744af39ad9617091b5c6b6d6898e439877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e9e3856906a5b34218fa0ed5a7e46744af39ad9617091b5c6b6d6898e439877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e9e3856906a5b34218fa0ed5a7e46744af39ad9617091b5c6b6d6898e439877","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b43590f9150978b84cc3647fe33b6add99a8ebc9493f94c5a2943648fab2458a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f158530cf8d415c1a5cc215806b0629f792c5d902bc8e5f71ea1923d874f3413","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f158530cf8d415c1a5cc215806b0629f792c5d902bc8e5f71ea1923d874f3413"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e9e3856906a5b34218fa0ed5a7e46744af39ad9617091b5c6b6d6898e439877"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f158530cf8d415c1a5cc215806b0629f792c5d902bc8e5f71ea1923d874f3413","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7785987c461127e6092ba3ef62f62139108f3def027850e8be34cf5dfb32116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3d3eb5bd229a92934501386eca36572aeb5154ebe668fae9dfce155ee50ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed3d3eb5bd229a92934501386eca36572aeb5154ebe668fae9dfce155ee50ca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3d3eb5bd229a92934501386eca36572aeb5154ebe668fae9dfce155ee50ca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f158530cf8d415c1a5cc215806b0629f792c5d902bc8e5f71ea1923d874f3413"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3d3eb5bd229a92934501386eca36572aeb5154ebe668fae9dfce155ee50ca7"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e9e3856906a5b34218fa0ed5a7e46744af39ad9617091b5c6b6d6898e439877","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f158530cf8d415c1a5cc215806b0629f792c5d902bc8e5f71ea1923d874f3413","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3d3eb5bd229a92934501386eca36572aeb5154ebe668fae9dfce155ee50ca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841"} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841"} {"level":"error","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33778","PortSpecifier":{"PortValue":33778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8cef572-497f-4992-ac8e-3cead5c4e655","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33778","PortSpecifier":{"PortValue":33778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590679,"nanos":320095512},"http":{"id":"f8cef572-497f-4992-ac8e-3cead5c4e655","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8cef572-497f-4992-ac8e-3cead5c4e655","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33662","PortSpecifier":{"PortValue":33662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33662","PortSpecifier":{"PortValue":33662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590679,"nanos":359742472},"http":{"id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/rate-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42f7f76a-2a00-4ef4-b43b-4c0991c667f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c63876be-8ecd-4717-b020-3434a9395821","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33788","PortSpecifier":{"PortValue":33788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c63876be-8ecd-4717-b020-3434a9395821","method":"POST","path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c63876be-8ecd-4717-b020-3434a9395821","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33788","PortSpecifier":{"PortValue":33788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590679,"nanos":395452000},"http":{"id":"c63876be-8ecd-4717-b020-3434a9395821","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H093R0UbkVs4hqdn_NaB0iwuQTJbeN0YFP1z1i3sHfyFabcDJoh2WV4etOI5"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1H093R0UbkVs4hqdn_NaB0iwuQTJbeN0YFP1z1i3sHfyFabcDJoh2WV4etOI5\"}"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"27d4d0c8-8893-4f90-bf84-2515e0751e20","keyName":"e2e-rate-a-3489c0","subscription":"e2e-rate-iso-a-3489c0","tenant":"e2e-shared-a-107ae7","userId":"27d4d0c8-8893-4f90-bf84-2515e0751e20","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\",\"requestedSubscription\":\"e2e-rate-iso-a-3489c0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3489c0","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c63876be-8ecd-4717-b020-3434a9395821","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3489c0"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c63876be-8ecd-4717-b020-3434a9395821","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"27d4d0c8-8893-4f90-bf84-2515e0751e20","keyName":"e2e-rate-a-3489c0","selected_subscription":"e2e-rate-iso-a-3489c0","selected_subscription_key":"ai-tenant-e2e-shared-a-107ae7/e2e-rate-iso-a-3489c0@ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3489c0","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c63876be-8ecd-4717-b020-3434a9395821","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:37:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c63876be-8ecd-4717-b020-3434a9395821","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33790","PortSpecifier":{"PortValue":33790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","method":"POST","path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33790","PortSpecifier":{"PortValue":33790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590680,"nanos":448539949},"http":{"id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H093R0UbkVs4hqdn_NaB0iwuQTJbeN0YFP1z1i3sHfyFabcDJoh2WV4etOI5"} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1H093R0UbkVs4hqdn_NaB0iwuQTJbeN0YFP1z1i3sHfyFabcDJoh2WV4etOI5\"}"} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"27d4d0c8-8893-4f90-bf84-2515e0751e20","keyName":"e2e-rate-a-3489c0","subscription":"e2e-rate-iso-a-3489c0","tenant":"e2e-shared-a-107ae7","userId":"27d4d0c8-8893-4f90-bf84-2515e0751e20","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\",\"requestedSubscription\":\"e2e-rate-iso-a-3489c0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3489c0","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"}} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3489c0"} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"27d4d0c8-8893-4f90-bf84-2515e0751e20","keyName":"e2e-rate-a-3489c0","selected_subscription":"e2e-rate-iso-a-3489c0","selected_subscription_key":"ai-tenant-e2e-shared-a-107ae7/e2e-rate-iso-a-3489c0@ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3489c0","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:38:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6e8f1ee-2f11-4ec7-abf2-6acdc5b160d9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33806","PortSpecifier":{"PortValue":33806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","method":"POST","path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33806","PortSpecifier":{"PortValue":33806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590681,"nanos":487836908},"http":{"id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H093R0UbkVs4hqdn_NaB0iwuQTJbeN0YFP1z1i3sHfyFabcDJoh2WV4etOI5"} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1H093R0UbkVs4hqdn_NaB0iwuQTJbeN0YFP1z1i3sHfyFabcDJoh2WV4etOI5\"}"} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"27d4d0c8-8893-4f90-bf84-2515e0751e20","keyName":"e2e-rate-a-3489c0","subscription":"e2e-rate-iso-a-3489c0","tenant":"e2e-shared-a-107ae7","userId":"27d4d0c8-8893-4f90-bf84-2515e0751e20","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\",\"requestedSubscription\":\"e2e-rate-iso-a-3489c0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3489c0","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"}} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3489c0"} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"27d4d0c8-8893-4f90-bf84-2515e0751e20","keyName":"e2e-rate-a-3489c0","selected_subscription":"e2e-rate-iso-a-3489c0","selected_subscription_key":"ai-tenant-e2e-shared-a-107ae7/e2e-rate-iso-a-3489c0@ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3489c0","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fab75ebf-1a52-40e4-aa68-677bdb33908b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590694,"nanos":295983006},"http":{"id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46105a5-c61f-482c-8ba1-06cd2def0baa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40954","PortSpecifier":{"PortValue":40954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40954","PortSpecifier":{"PortValue":40954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590694,"nanos":332930352},"http":{"id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"]}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ed640b83f363"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2d8b90fe-fa15-4d12-a04a-805e71b156ea"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6c5da5fa-1f65-4453-a344-3aa3ce7343aa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/rate-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f1e381f-3fb4-4918-b63c-f25f950dd5cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52248","PortSpecifier":{"PortValue":52248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","method":"POST","path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52248","PortSpecifier":{"PortValue":52248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590694,"nanos":368286893},"http":{"id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CSE7pWZHgwJPZ7u7_nLvvX7h1QO0ziEbvIJEAAU6eGgKMufBSjUqQg7Whofn"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CSE7pWZHgwJPZ7u7_nLvvX7h1QO0ziEbvIJEAAU6eGgKMufBSjUqQg7Whofn\"}"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d69e437-c1aa-4715-9d01-0c9799135b37","keyName":"e2e-rate-a-742890","subscription":"e2e-rate-iso-a-742890","tenant":"e2e-shared-a-107ae7","userId":"8d69e437-c1aa-4715-9d01-0c9799135b37","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\",\"requestedSubscription\":\"e2e-rate-iso-a-742890\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-742890","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-742890"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8d69e437-c1aa-4715-9d01-0c9799135b37","keyName":"e2e-rate-a-742890","selected_subscription":"e2e-rate-iso-a-742890","selected_subscription_key":"ai-tenant-e2e-shared-a-107ae7/e2e-rate-iso-a-742890@ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-742890","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"254fc45a-730f-4f4c-b4c4-a9a7b222d2a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52250","PortSpecifier":{"PortValue":52250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","method":"POST","path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52250","PortSpecifier":{"PortValue":52250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590695,"nanos":405175153},"http":{"id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CSE7pWZHgwJPZ7u7_nLvvX7h1QO0ziEbvIJEAAU6eGgKMufBSjUqQg7Whofn"} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CSE7pWZHgwJPZ7u7_nLvvX7h1QO0ziEbvIJEAAU6eGgKMufBSjUqQg7Whofn\"}"} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d69e437-c1aa-4715-9d01-0c9799135b37","keyName":"e2e-rate-a-742890","subscription":"e2e-rate-iso-a-742890","tenant":"e2e-shared-a-107ae7","userId":"8d69e437-c1aa-4715-9d01-0c9799135b37","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\",\"requestedSubscription\":\"e2e-rate-iso-a-742890\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-742890","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"}} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-742890"} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8d69e437-c1aa-4715-9d01-0c9799135b37","keyName":"e2e-rate-a-742890","selected_subscription":"e2e-rate-iso-a-742890","selected_subscription_key":"ai-tenant-e2e-shared-a-107ae7/e2e-rate-iso-a-742890@ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-742890","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:38:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4631b5f7-f62a-4eb6-baaf-2ec5219f874b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52260","PortSpecifier":{"PortValue":52260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e67f084a-99d4-40f4-9b7f-5798153b7193","method":"POST","path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions","host":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52260","PortSpecifier":{"PortValue":52260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590696,"nanos":436721374},"http":{"id":"e67f084a-99d4-40f4-9b7f-5798153b7193","method":"POST","headers":{":authority":"e2e-shared-a-107ae7.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CSE7pWZHgwJPZ7u7_nLvvX7h1QO0ziEbvIJEAAU6eGgKMufBSjUqQg7Whofn"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CSE7pWZHgwJPZ7u7_nLvvX7h1QO0ziEbvIJEAAU6eGgKMufBSjUqQg7Whofn\"}"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d69e437-c1aa-4715-9d01-0c9799135b37","keyName":"e2e-rate-a-742890","subscription":"e2e-rate-iso-a-742890","tenant":"e2e-shared-a-107ae7","userId":"8d69e437-c1aa-4715-9d01-0c9799135b37","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\",\"requestedSubscription\":\"e2e-rate-iso-a-742890\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-107ae7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-742890","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-107ae7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-742890"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8d69e437-c1aa-4715-9d01-0c9799135b37","keyName":"e2e-rate-a-742890","selected_subscription":"e2e-rate-iso-a-742890","selected_subscription_key":"ai-tenant-e2e-shared-a-107ae7/e2e-rate-iso-a-742890@ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-107ae7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-742890","namespace":"ai-tenant-e2e-shared-a-107ae7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-107ae7/rate-test-model-107ae7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e67f084a-99d4-40f4-9b7f-5798153b7193","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53362998-adff-455c-88dd-2e7786d0b980","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40962","PortSpecifier":{"PortValue":40962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53362998-adff-455c-88dd-2e7786d0b980","method":"POST","path":"/ai-tenant-e2e-shared-b-5b9afe/rate-test-model-5b9afe/v1/completions","host":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53362998-adff-455c-88dd-2e7786d0b980","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40962","PortSpecifier":{"PortValue":40962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784590696,"nanos":468143555},"http":{"id":"53362998-adff-455c-88dd-2e7786d0b980","method":"POST","headers":{":authority":"e2e-shared-b-5b9afe.apps.559800ea-0d96-4536-b5a8-ed640b83f363.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-5b9afe/rate-test-model-5b9afe/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1B9SWxmUy4k2TBrM_4KSm3NA4wB9xWezWQc0zgMGZ4cQIw77JaXY3r6pRwf4"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1B9SWxmUy4k2TBrM_4KSm3NA4wB9xWezWQc0zgMGZ4cQIw77JaXY3r6pRwf4\"}"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"150c73c5-9978-4de6-9d9b-0bab35c1ded8","keyName":"e2e-rate-b-742890","subscription":"e2e-rate-iso-b-742890","tenant":"e2e-shared-b-5b9afe","userId":"150c73c5-9978-4de6-9d9b-0bab35c1ded8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-5b9afe/rate-test-model-5b9afe\",\"requestedSubscription\":\"e2e-rate-iso-b-742890\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5b9afe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b9afe","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-742890","namespace":"ai-tenant-e2e-shared-b-5b9afe","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5b9afe/rate-test-model-5b9afe"}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53362998-adff-455c-88dd-2e7786d0b980","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5b9afe/rate-test-model-5b9afe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5b9afe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-742890"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53362998-adff-455c-88dd-2e7786d0b980","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"150c73c5-9978-4de6-9d9b-0bab35c1ded8","keyName":"e2e-rate-b-742890","selected_subscription":"e2e-rate-iso-b-742890","selected_subscription_key":"ai-tenant-e2e-shared-b-5b9afe/e2e-rate-iso-b-742890@ai-tenant-e2e-shared-b-5b9afe/rate-test-model-5b9afe","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b9afe","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-742890","namespace":"ai-tenant-e2e-shared-b-5b9afe","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5b9afe/rate-test-model-5b9afe"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53362998-adff-455c-88dd-2e7786d0b980","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53362998-adff-455c-88dd-2e7786d0b980","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98db31bbccdaa755640d08d231d648f7c9a36d39752b84f89a78efa81bdc6b26"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da6fee3617dbd591c8a3fdd3013d960ea93c02f46da8691552cc55377cf37421"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55959c3f1702b2ac96f40391359cfc3ea33bc521d44593443b26bcae1c7d6cee"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cb4ee0f346fc65adf8d0a8a87d5e36b344615c2d45281eec19fc31c8b1db074"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/081372102e3fc490e3c6116f76605cd118e0d26b3ed81ed5aa9f6f7eb72c567e"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1605985b637cc3751dd6e7adbea684074f89f0cca40c80568497d67d0073203"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d3e304d503b377a44b9bd6b95362a13d1e9c09b0d2859a6d1e7a54b35be3f43"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed3d3eb5bd229a92934501386eca36572aeb5154ebe668fae9dfce155ee50ca7"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b43590f9150978b84cc3647fe33b6add99a8ebc9493f94c5a2943648fab2458a"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e9e3856906a5b34218fa0ed5a7e46744af39ad9617091b5c6b6d6898e439877"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7785987c461127e6092ba3ef62f62139108f3def027850e8be34cf5dfb32116"} {"level":"info","ts":"2026-07-20T23:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7967c529ebb438e264e970c39c959d8cfcc0a6cff38a31378d35b428f3f67841"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe3a509c59099d223c437a223dda9821553f3462a4b3908c43b0bf56cc796f4b"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ac323666517a91081cf8769829e0735a85269220329c24260ff27fc5496978"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/634d35736f376c7d8db753a4a71ec66904c0935192f591f6ca2692a46ac10de3"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c35a9464f382696367291d62c112b6edc6aefe46569c2fbed01f8a6a1fd5161"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a20ab647d4d41bee15fe96dcb35ffbb184630e27d3b8a3277697b7444fee553"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec6b7e3c763b7a2b3ce6fcf3bf777739f06b1d34e54006003f3f2d574b1f4d6e"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e514fb13413e071d9abb87b50555e17b2392308ae3d567dd050f003f4ca75cf3"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d74271f4b5e83a6df67b890eb9e1b9d1aff2c5dfdd2acc3970bcc4bf27900f5"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bedde0e2cb6ab318b73040f6aeafbf6a7a69fa9cc7e8eb4489b6178e3165bed6"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45ff5dc842d5412844af134dfa9775270b8afe261aeecb3be1ac785d7dc84f08"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2b396f576c2aa130fd4eaf2c366f30e9b70b914e8f875e22ee558a0e4aa9c1a"} {"level":"info","ts":"2026-07-20T23:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f158530cf8d415c1a5cc215806b0629f792c5d902bc8e5f71ea1923d874f3413"}