--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:56:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42026","PortSpecifier":{"PortValue":42026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"503565b5-a180-4b69-9b62-18c709e5b9c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42026","PortSpecifier":{"PortValue":42026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577415,"nanos":473852582},"http":{"id":"503565b5-a180-4b69-9b62-18c709e5b9c7","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/auth-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"503565b5-a180-4b69-9b62-18c709e5b9c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58312","PortSpecifier":{"PortValue":58312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58312","PortSpecifier":{"PortValue":58312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577415,"nanos":528043192},"http":{"id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/auth-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3428f4f1-1020-4995-be52-abcfe5a6e9f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58322","PortSpecifier":{"PortValue":58322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58322","PortSpecifier":{"PortValue":58322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577415,"nanos":562529195},"http":{"id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","method":"GET","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2rXVj2YyHXEFfxkM_sE6eGwiV1XRZPWgXd4ykkgzKjmCxgtYdVsjmcSYIxsq"} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2rXVj2YyHXEFfxkM_sE6eGwiV1XRZPWgXd4ykkgzKjmCxgtYdVsjmcSYIxsq\"}"} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-20T19:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"527bd5f7-8cc4-4dff-a4a4-3c46a93c5427","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-20T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"info","ts":"2026-07-20T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"debug","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad61c842-b318-4447-a4de-82608df1054f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36438","PortSpecifier":{"PortValue":36438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad61c842-b318-4447-a4de-82608df1054f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad61c842-b318-4447-a4de-82608df1054f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36438","PortSpecifier":{"PortValue":36438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577432,"nanos":665926638},"http":{"id":"ad61c842-b318-4447-a4de-82608df1054f","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad61c842-b318-4447-a4de-82608df1054f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad61c842-b318-4447-a4de-82608df1054f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad61c842-b318-4447-a4de-82608df1054f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad61c842-b318-4447-a4de-82608df1054f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad61c842-b318-4447-a4de-82608df1054f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad61c842-b318-4447-a4de-82608df1054f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/auth-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad61c842-b318-4447-a4de-82608df1054f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad61c842-b318-4447-a4de-82608df1054f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad61c842-b318-4447-a4de-82608df1054f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad61c842-b318-4447-a4de-82608df1054f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad61c842-b318-4447-a4de-82608df1054f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56168","PortSpecifier":{"PortValue":56168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60e0d77d-48d2-44a1-8632-68f62b598459","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56168","PortSpecifier":{"PortValue":56168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577432,"nanos":699033060},"http":{"id":"60e0d77d-48d2-44a1-8632-68f62b598459","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/auth-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e0d77d-48d2-44a1-8632-68f62b598459","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36442","PortSpecifier":{"PortValue":36442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4058359-015e-44d1-9841-bd38b73d25d7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36442","PortSpecifier":{"PortValue":36442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577432,"nanos":735189880},"http":{"id":"e4058359-015e-44d1-9841-bd38b73d25d7","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/auth-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4058359-015e-44d1-9841-bd38b73d25d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56170","PortSpecifier":{"PortValue":56170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9379bac8-f321-46c0-abbc-409d8891e18c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56170","PortSpecifier":{"PortValue":56170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577432,"nanos":771143323},"http":{"id":"9379bac8-f321-46c0-abbc-409d8891e18c","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/auth-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9379bac8-f321-46c0-abbc-409d8891e18c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"info","ts":"2026-07-20T19:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"debug","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52510","PortSpecifier":{"PortValue":52510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"748e9839-0f4f-49fc-91f9-c086432bb57a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52510","PortSpecifier":{"PortValue":52510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577449,"nanos":836653277},"http":{"id":"748e9839-0f4f-49fc-91f9-c086432bb57a","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/auth-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"748e9839-0f4f-49fc-91f9-c086432bb57a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55056","PortSpecifier":{"PortValue":55056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23a1d672-bdfb-49ee-899f-892048fc460f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55056","PortSpecifier":{"PortValue":55056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577449,"nanos":895889285},"http":{"id":"23a1d672-bdfb-49ee-899f-892048fc460f","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/auth-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23a1d672-bdfb-49ee-899f-892048fc460f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55070","PortSpecifier":{"PortValue":55070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"378568b3-728f-40c9-a59f-e65988cb8a73","method":"GET","path":"/maas-api/v1/api-keys/0f0fc75a-cb1f-4793-bcba-01cd5d508d74","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55070","PortSpecifier":{"PortValue":55070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577449,"nanos":933534778},"http":{"id":"378568b3-728f-40c9-a59f-e65988cb8a73","method":"GET","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0f0fc75a-cb1f-4793-bcba-01cd5d508d74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0f0fc75a-cb1f-4793-bcba-01cd5d508d74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/auth-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"378568b3-728f-40c9-a59f-e65988cb8a73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52512","PortSpecifier":{"PortValue":52512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","method":"GET","path":"/maas-api/v1/api-keys/0f0fc75a-cb1f-4793-bcba-01cd5d508d74","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52512","PortSpecifier":{"PortValue":52512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577449,"nanos":964103535},"http":{"id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","method":"GET","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0f0fc75a-cb1f-4793-bcba-01cd5d508d74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0f0fc75a-cb1f-4793-bcba-01cd5d508d74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/auth-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad8324fb-e841-4aa4-b69e-f0ed2ea08fba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:57:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"debug","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"error","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"error","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"error","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"error","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:57:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:57:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:57:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:57:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:57:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:57:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46920","PortSpecifier":{"PortValue":46920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46920","PortSpecifier":{"PortValue":46920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577467,"nanos":27361955},"http":{"id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/auth-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b3e64b1-f7f3-4b27-9ac2-0cd11ea5639f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36996","PortSpecifier":{"PortValue":36996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36996","PortSpecifier":{"PortValue":36996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577467,"nanos":62925659},"http":{"id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/auth-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac3d9d5-a974-448f-8a95-11b07b4309cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46934","PortSpecifier":{"PortValue":46934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46934","PortSpecifier":{"PortValue":46934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577467,"nanos":98313518},"http":{"id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MZfNMJ338rnPtzKK_Utlg7PASKG55izKo448LX59TYjRP0T3bGwS9PI7yrmD"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MZfNMJ338rnPtzKK_Utlg7PASKG55izKo448LX59TYjRP0T3bGwS9PI7yrmD\"}"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48874d2c-98dd-4f53-9f92-b65f91b160d4","keyName":"e2e-auth-iso-a-46a43f","subscription":"e2e-auth-iso-fd05af","tenant":"e2e-shared-a-710890","userId":"48874d2c-98dd-4f53-9f92-b65f91b160d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/auth-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fd05af"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:57:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0a315e7-92e6-4dbd-abd0-956bcf90f0f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"info","ts":"2026-07-20T19:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74e0f93b7528616116eb35f9aa6b142c2d1fffcb0fbf17b3e2ca3504c98f5c70"} {"level":"info","ts":"2026-07-20T19:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc13dfb48c16fc858d32bdbc33d785239d4577263efc8dfed56fa33f302d8830"} {"level":"info","ts":"2026-07-20T19:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f846c9b51fb945d7f451e527c730eb6e48d59668fa0242ee72502803597237b1"} {"level":"info","ts":"2026-07-20T19:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"} {"level":"info","ts":"2026-07-20T19:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3b1d47733f683b687a8afa3b5905766d1b4b5c0164d3eebb4af41569a24e400"} {"level":"info","ts":"2026-07-20T19:57:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323242c484adfce332d5273f21c650477c0b1e730451cc623d1ac2a79ee0d676"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b036977a569d19487b772f2efcb6824330c2e70a1874d775345dd98f85c46bf"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dd2be434b8e2f2041b108d19f02ea4833740fe6a3975560e648a28d102dbccb"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48bf0bca41c5b61e9c755313438442528fa58ee4bf0008b81642ad3f27e01a9a"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d3b93534a696027f67ae7335390ed569834573f2762a8ca856812f5383df0d1"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07c99ab3e64c8a08fba918868bee92dd12383b8181125a43a6feac36bf006f89"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85d254cf8a540930bf748295d435dc11bf12605cac60ec7618b136992af4048f"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3633ec5b294878a2f55de3f84dfe0e65749a0fb78c7fb8267e1bfc8f73ded4fa"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad1fbeb4b467ca4e85bdf4daf8aa5b196e48d00ba90ce361d543c198a5cdb45"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa852ac90bb84fec9f016e5bf31cb8988fed2bf776d0e0d530776239b542e831"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1c820b519f293b3a7f1c3e163df41ed41ff11380bd98fc5c6c35b2aea0478d3"} {"level":"info","ts":"2026-07-20T19:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2987f0e17c36b13676a62f236a3537227216b6ff99935673ac1c2a9a7d36a32d"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"error","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b64c0d69611fdfe6dee19a5910f718a35f071d61ec0247e047ec7b7fa68ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b64c0d69611fdfe6dee19a5910f718a35f071d61ec0247e047ec7b7fa68ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b64c0d69611fdfe6dee19a5910f718a35f071d61ec0247e047ec7b7fa68ba6"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b64c0d69611fdfe6dee19a5910f718a35f071d61ec0247e047ec7b7fa68ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b64c0d69611fdfe6dee19a5910f718a35f071d61ec0247e047ec7b7fa68ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b64c0d69611fdfe6dee19a5910f718a35f071d61ec0247e047ec7b7fa68ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b64c0d69611fdfe6dee19a5910f718a35f071d61ec0247e047ec7b7fa68ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b64c0d69611fdfe6dee19a5910f718a35f071d61ec0247e047ec7b7fa68ba6"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205"} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/763b5ab3d575190258271bc15273dc4f27dfb8abd6abc8014b8f0f7f0a327edc"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"763b5ab3d575190258271bc15273dc4f27dfb8abd6abc8014b8f0f7f0a327edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["763b5ab3d575190258271bc15273dc4f27dfb8abd6abc8014b8f0f7f0a327edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"763b5ab3d575190258271bc15273dc4f27dfb8abd6abc8014b8f0f7f0a327edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c922c095d1f15b1c78e5ecdeea30ff681980369c2bf27992d1dab61215bda9"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/763b5ab3d575190258271bc15273dc4f27dfb8abd6abc8014b8f0f7f0a327edc"} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915fa32991fa1c36708346258029d625b7b02746c1feb0062753195de34519c8"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c922c095d1f15b1c78e5ecdeea30ff681980369c2bf27992d1dab61215bda9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93c922c095d1f15b1c78e5ecdeea30ff681980369c2bf27992d1dab61215bda9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a6bbcbe510e4178f07658aba268ce3d107ce56ed433626c9b70f5ac80d72a3"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c922c095d1f15b1c78e5ecdeea30ff681980369c2bf27992d1dab61215bda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"763b5ab3d575190258271bc15273dc4f27dfb8abd6abc8014b8f0f7f0a327edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c922c095d1f15b1c78e5ecdeea30ff681980369c2bf27992d1dab61215bda9"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915fa32991fa1c36708346258029d625b7b02746c1feb0062753195de34519c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["915fa32991fa1c36708346258029d625b7b02746c1feb0062753195de34519c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915fa32991fa1c36708346258029d625b7b02746c1feb0062753195de34519c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23a6bbcbe510e4178f07658aba268ce3d107ce56ed433626c9b70f5ac80d72a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23a6bbcbe510e4178f07658aba268ce3d107ce56ed433626c9b70f5ac80d72a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915fa32991fa1c36708346258029d625b7b02746c1feb0062753195de34519c8"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23a6bbcbe510e4178f07658aba268ce3d107ce56ed433626c9b70f5ac80d72a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c922c095d1f15b1c78e5ecdeea30ff681980369c2bf27992d1dab61215bda9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23a6bbcbe510e4178f07658aba268ce3d107ce56ed433626c9b70f5ac80d72a3"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915fa32991fa1c36708346258029d625b7b02746c1feb0062753195de34519c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23a6bbcbe510e4178f07658aba268ce3d107ce56ed433626c9b70f5ac80d72a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/639e223fe90e9df44776d2061fa6ff08ce0f12057f986843447403e91163dc50"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"639e223fe90e9df44776d2061fa6ff08ce0f12057f986843447403e91163dc50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["639e223fe90e9df44776d2061fa6ff08ce0f12057f986843447403e91163dc50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0725b52a3554a03170821a34dfea19549b61b6cbe0a62cd32f0e088f0a7f6bee"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"639e223fe90e9df44776d2061fa6ff08ce0f12057f986843447403e91163dc50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0725b52a3554a03170821a34dfea19549b61b6cbe0a62cd32f0e088f0a7f6bee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0725b52a3554a03170821a34dfea19549b61b6cbe0a62cd32f0e088f0a7f6bee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/639e223fe90e9df44776d2061fa6ff08ce0f12057f986843447403e91163dc50"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0725b52a3554a03170821a34dfea19549b61b6cbe0a62cd32f0e088f0a7f6bee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0725b52a3554a03170821a34dfea19549b61b6cbe0a62cd32f0e088f0a7f6bee"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40"} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"639e223fe90e9df44776d2061fa6ff08ce0f12057f986843447403e91163dc50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0725b52a3554a03170821a34dfea19549b61b6cbe0a62cd32f0e088f0a7f6bee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e"} {"level":"info","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40178","PortSpecifier":{"PortValue":40178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31649c3f-e33d-4748-a425-d0ec3b58e488","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40178","PortSpecifier":{"PortValue":40178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577525,"nanos":460398917},"http":{"id":"31649c3f-e33d-4748-a425-d0ec3b58e488","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/sub-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31649c3f-e33d-4748-a425-d0ec3b58e488","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54762","PortSpecifier":{"PortValue":54762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54762","PortSpecifier":{"PortValue":54762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577525,"nanos":499590113},"http":{"id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/sub-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a9d1f1b-c690-4187-8b15-1a5ce0b548e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40186","PortSpecifier":{"PortValue":40186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40186","PortSpecifier":{"PortValue":40186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577525,"nanos":537988144},"http":{"id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","method":"GET","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DT5ri5HEaE4q9hj0_ZUEP3GYbJtWCHgAlWwAWiKhPDffNPycsAJhoFPcM3I0"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DT5ri5HEaE4q9hj0_ZUEP3GYbJtWCHgAlWwAWiKhPDffNPycsAJhoFPcM3I0\"}"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da474728-b970-4a6c-a60b-35b7ed7ee960","keyName":"e2e-sub-iso-639f29","subscription":"e2e-a-only-055d89","tenant":"e2e-shared-a-710890","userId":"da474728-b970-4a6c-a60b-35b7ed7ee960","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/sub-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-055d89"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e06a65a9-2fdd-4fda-b4f6-ec555ac8f4b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54768","PortSpecifier":{"PortValue":54768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6df88765-3d52-4135-9c66-9ccf894f1f61","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54768","PortSpecifier":{"PortValue":54768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577525,"nanos":567665866},"http":{"id":"6df88765-3d52-4135-9c66-9ccf894f1f61","method":"GET","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Nm5lKk237kOziwVr_y4HcJ2TRNdJChLO950uN7L4tANhvfNF3izs3jecyKgT"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Nm5lKk237kOziwVr_y4HcJ2TRNdJChLO950uN7L4tANhvfNF3izs3jecyKgT\"}"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a2f6da9-7727-47d1-bf52-ffeea553efbb","keyName":"e2e-sub-iso-f1d9aa","subscription":"e2e-b-only-055d89","tenant":"e2e-shared-b-01f2d8","userId":"8a2f6da9-7727-47d1-bf52-ffeea553efbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/sub-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-055d89"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6df88765-3d52-4135-9c66-9ccf894f1f61","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51508","PortSpecifier":{"PortValue":51508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51508","PortSpecifier":{"PortValue":51508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577537,"nanos":680394833},"http":{"id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/sub-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7c354bf-5c3a-4aec-b48c-a86c072e2272","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58252","PortSpecifier":{"PortValue":58252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"465ac117-effb-4173-8f27-3f5f8001d2f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58252","PortSpecifier":{"PortValue":58252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577537,"nanos":716326423},"http":{"id":"465ac117-effb-4173-8f27-3f5f8001d2f3","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/sub-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465ac117-effb-4173-8f27-3f5f8001d2f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51522","PortSpecifier":{"PortValue":51522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51522","PortSpecifier":{"PortValue":51522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577537,"nanos":746723741},"http":{"id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-T46EVJmyih8F9jQI_ONtgMIzKz9f1QEldNosoTPX4MvEtdEb8NGMc5svgYuw"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-T46EVJmyih8F9jQI_ONtgMIzKz9f1QEldNosoTPX4MvEtdEb8NGMc5svgYuw\"}"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"34d65c05-de9d-45f2-ba6d-a5818da04472","keyName":"e2e-sub-iso-c4a394","subscription":"e2e-shared-sub-32930a","tenant":"e2e-shared-a-710890","userId":"34d65c05-de9d-45f2-ba6d-a5818da04472","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/sub-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-32930a"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bed4fde-dc0c-4736-b3f1-f7929f3ebd25","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58256","PortSpecifier":{"PortValue":58256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88b76413-5286-9db9-8ca2-5cec918c38b3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58256","PortSpecifier":{"PortValue":58256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577537,"nanos":777345566},"http":{"id":"88b76413-5286-9db9-8ca2-5cec918c38b3","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-a6O65K5gklktulzX_t5JfgG1uHfchikAt7EiXRti0ozwanf0nRGivv944lDY"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-a6O65K5gklktulzX_t5JfgG1uHfchikAt7EiXRti0ozwanf0nRGivv944lDY\"}"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9e8cb64-15d1-4f7a-bbc8-0864d376b4b6","keyName":"e2e-sub-iso-126256","subscription":"e2e-shared-sub-32930a","tenant":"e2e-shared-b-01f2d8","userId":"b9e8cb64-15d1-4f7a-bbc8-0864d376b4b6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/sub-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-32930a"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:58:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88b76413-5286-9db9-8ca2-5cec918c38b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/915fa32991fa1c36708346258029d625b7b02746c1feb0062753195de34519c8"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d2cd775ba8677b704146384ae5457a77aa25b6b35832ffcc91cf1b911455205"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6d54bd3f311ca18a323ad03888d5eb46061546d089d99600b1ecf6c3495fbe9"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7b64c0d69611fdfe6dee19a5910f718a35f071d61ec0247e047ec7b7fa68ba6"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/639e223fe90e9df44776d2061fa6ff08ce0f12057f986843447403e91163dc50"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93c922c095d1f15b1c78e5ecdeea30ff681980369c2bf27992d1dab61215bda9"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/537876fe5d0b3fd486eba0e0ec452f794a710538b4aa3d2957f0b5623c926016"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23a6bbcbe510e4178f07658aba268ce3d107ce56ed433626c9b70f5ac80d72a3"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eef2062d59cf9dd4b84e52ecbafdb50ca8af73c52dcf21228368eec7a7829b98"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ceae979302ecc9aa9927e848b44d0f0a285170fad2d7f44ceed2a15a7834d14"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3395a2d5258df557f4047d6473702322deae11073722b901ddfc78352ab03f40"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92e0de453f97bc504262ca4c666b105eaaa7fabb677ba915de047587678ea7be"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4a5b253226095d3973283bd75693a0a0eb2b5fa4c6812a318d1bd43b5ba3d7d"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0725b52a3554a03170821a34dfea19549b61b6cbe0a62cd32f0e088f0a7f6bee"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/763b5ab3d575190258271bc15273dc4f27dfb8abd6abc8014b8f0f7f0a327edc"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f45c816488f6a725787d702e1a5eb75eb92b3480508acff5c2df57b63454be4e"} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"} {"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"} {"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"error","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T20:00:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"} {"level":"error","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T20:00:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47508","PortSpecifier":{"PortValue":47508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47508","PortSpecifier":{"PortValue":47508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577606,"nanos":319025577},"http":{"id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c686377e-12ef-4f57-a8fa-53fa725abc7d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51728","PortSpecifier":{"PortValue":51728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3f298d7-acef-4260-a6f9-637ac111422a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51728","PortSpecifier":{"PortValue":51728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577606,"nanos":385794593},"http":{"id":"b3f298d7-acef-4260-a6f9-637ac111422a","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f298d7-acef-4260-a6f9-637ac111422a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47516","PortSpecifier":{"PortValue":47516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47516","PortSpecifier":{"PortValue":47516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577606,"nanos":445100197},"http":{"id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh\"}"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","subscription":"e2e-rate-iso-a-e1235c","tenant":"e2e-shared-a-710890","userId":"0d944e89-678f-424c-8af5-d78a0bbe0401","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-e1235c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e1235c"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","selected_subscription":"e2e-rate-iso-a-e1235c","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-e1235c@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d2c43d2-083b-4bbc-ab0a-224f43b6e0b8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50600","PortSpecifier":{"PortValue":50600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50600","PortSpecifier":{"PortValue":50600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577607,"nanos":533796910},"http":{"id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh"} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh\"}"} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","subscription":"e2e-rate-iso-a-e1235c","tenant":"e2e-shared-a-710890","userId":"0d944e89-678f-424c-8af5-d78a0bbe0401","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-e1235c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e1235c"} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","selected_subscription":"e2e-rate-iso-a-e1235c","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-e1235c@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2cc8dfd-312f-4d49-b540-54d1e380eb42","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50610","PortSpecifier":{"PortValue":50610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25da62ea-879e-4546-99ca-37b6de70ad8c","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50610","PortSpecifier":{"PortValue":50610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577608,"nanos":579961505},"http":{"id":"25da62ea-879e-4546-99ca-37b6de70ad8c","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh"} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fYUbBWKPW6bHTGds_H1pthCHSXxD5gL76ZzSf9VgdhwxLHfqidhFR47npTFh\"}"} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","subscription":"e2e-rate-iso-a-e1235c","tenant":"e2e-shared-a-710890","userId":"0d944e89-678f-424c-8af5-d78a0bbe0401","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-e1235c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e1235c"} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d944e89-678f-424c-8af5-d78a0bbe0401","keyName":"e2e-rate-a-e1235c","selected_subscription":"e2e-rate-iso-a-e1235c","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-e1235c@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e1235c","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25da62ea-879e-4546-99ca-37b6de70ad8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47608","PortSpecifier":{"PortValue":47608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47608","PortSpecifier":{"PortValue":47608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577621,"nanos":471805907},"http":{"id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5ad1694-6fdf-46b7-b654-4aa086675f84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cde824e-6106-47dd-b132-05b85efa7418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32982","PortSpecifier":{"PortValue":32982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cde824e-6106-47dd-b132-05b85efa7418","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cde824e-6106-47dd-b132-05b85efa7418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32982","PortSpecifier":{"PortValue":32982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577621,"nanos":512116504},"http":{"id":"4cde824e-6106-47dd-b132-05b85efa7418","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4cde824e-6106-47dd-b132-05b85efa7418","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"]}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cde824e-6106-47dd-b132-05b85efa7418","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aacb5659307e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=daca6296-9f3a-4297-b058-51b2894a4c9c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"67cf268c-5ac8-4537-9e7a-60ddba8b56a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cde824e-6106-47dd-b132-05b85efa7418","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cde824e-6106-47dd-b132-05b85efa7418","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cde824e-6106-47dd-b132-05b85efa7418","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47622","PortSpecifier":{"PortValue":47622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577621,"nanos":549426160},"http":{"id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3\"}"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","subscription":"e2e-rate-iso-a-11132d","tenant":"e2e-shared-a-710890","userId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-11132d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11132d"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","selected_subscription":"e2e-rate-iso-a-11132d","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-11132d@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a19dc8fd-c4e1-4f91-8f21-7708b4293a0a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99547aef-b497-4031-91e7-969ea55ef558","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47634","PortSpecifier":{"PortValue":47634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99547aef-b497-4031-91e7-969ea55ef558","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99547aef-b497-4031-91e7-969ea55ef558","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47634","PortSpecifier":{"PortValue":47634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577622,"nanos":585818151},"http":{"id":"99547aef-b497-4031-91e7-969ea55ef558","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3"} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3\"}"} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","subscription":"e2e-rate-iso-a-11132d","tenant":"e2e-shared-a-710890","userId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-11132d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99547aef-b497-4031-91e7-969ea55ef558","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11132d"} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99547aef-b497-4031-91e7-969ea55ef558","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","selected_subscription":"e2e-rate-iso-a-11132d","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-11132d@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99547aef-b497-4031-91e7-969ea55ef558","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99547aef-b497-4031-91e7-969ea55ef558","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47636","PortSpecifier":{"PortValue":47636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05db822a-8653-494a-a436-ce14d3ba9c14","method":"POST","path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions","host":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47636","PortSpecifier":{"PortValue":47636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577623,"nanos":625116461},"http":{"id":"05db822a-8653-494a-a436-ce14d3ba9c14","method":"POST","headers":{":authority":"e2e-shared-a-710890.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-710890/rate-test-model-710890/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hrmx0MUEUo6ra9O9_OOkxRfPdhYz4NspAhbR6C6Fk0rYl0H9IjuqBnwXxeb3\"}"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","subscription":"e2e-rate-iso-a-11132d","tenant":"e2e-shared-a-710890","userId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\",\"requestedSubscription\":\"e2e-rate-iso-a-11132d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-710890.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-710890/rate-test-model-710890\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-710890/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11132d"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3dc2bd6d-5f33-4ee7-85bf-4ce936f80819","keyName":"e2e-rate-a-11132d","selected_subscription":"e2e-rate-iso-a-11132d","selected_subscription_key":"ai-tenant-e2e-shared-a-710890/e2e-rate-iso-a-11132d@ai-tenant-e2e-shared-a-710890/rate-test-model-710890","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-710890","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11132d","namespace":"ai-tenant-e2e-shared-a-710890","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-710890/rate-test-model-710890"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05db822a-8653-494a-a436-ce14d3ba9c14","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"126093be-b569-4361-8bb9-943348e4aad3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32988","PortSpecifier":{"PortValue":32988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"126093be-b569-4361-8bb9-943348e4aad3","method":"POST","path":"/ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8/v1/completions","host":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"126093be-b569-4361-8bb9-943348e4aad3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:32988","PortSpecifier":{"PortValue":32988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784577623,"nanos":658711243},"http":{"id":"126093be-b569-4361-8bb9-943348e4aad3","method":"POST","headers":{":authority":"e2e-shared-b-01f2d8.apps.b9ee6f16-0ac6-4025-8186-aacb5659307e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zZLgALpAArewlmgJ_FNF9zccCPeF0XLXpq4XrdsMmTwHLFTf4BKkUBztHyKN"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zZLgALpAArewlmgJ_FNF9zccCPeF0XLXpq4XrdsMmTwHLFTf4BKkUBztHyKN\"}"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a7bfec1-64d6-47e8-9c1f-294ba5c83c1b","keyName":"e2e-rate-b-11132d","subscription":"e2e-rate-iso-b-11132d","tenant":"e2e-shared-b-01f2d8","userId":"6a7bfec1-64d6-47e8-9c1f-294ba5c83c1b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8\",\"requestedSubscription\":\"e2e-rate-iso-b-11132d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-01f2d8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-01f2d8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-11132d","namespace":"ai-tenant-e2e-shared-b-01f2d8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8"}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"126093be-b569-4361-8bb9-943348e4aad3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-01f2d8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-11132d"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"126093be-b569-4361-8bb9-943348e4aad3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6a7bfec1-64d6-47e8-9c1f-294ba5c83c1b","keyName":"e2e-rate-b-11132d","selected_subscription":"e2e-rate-iso-b-11132d","selected_subscription_key":"ai-tenant-e2e-shared-b-01f2d8/e2e-rate-iso-b-11132d@ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-01f2d8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-11132d","namespace":"ai-tenant-e2e-shared-b-01f2d8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-01f2d8/rate-test-model-01f2d8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"126093be-b569-4361-8bb9-943348e4aad3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"126093be-b569-4361-8bb9-943348e4aad3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bccb88fe2b33e1d863c23cb143c994334a166812884bed6fdf69248f27c891da"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5563525b597c743dcedbc433fb4ce1edc963acc391e1f1dced61964a915d8a2"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99952ced05f37a8e43f9a9f961378d8739c21042d27ea31c9e4e28976792daf9"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62d46b40e3bf4686f33242fb1ba3726138215c30845d320c966142c31d72f6b3"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60579a76fe18a43c009d00601328049d1ff73167b4aaf595e94c34f484fa6cdd"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5730fe2dbf8e3c9aaec837b8ec35351471f638f07d58ae9d329afae8be763bcb"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c6976db9e5faf34eb694700f51a5dd38ae1eab395e48741f1bcbd34193f337"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5d77a7447b70aa856a60303144d285c880accb02307506a4cc527b0a0f98604"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75f8e488ca78d00b0e35a7ac332f086b0b589ee32a6ec737c66bbdb7607365e4"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e81e0d595e13ea7d60d20c2a0243f77f1df8028bd8cc8963ac37132e12b0b3f"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdb2cbdf2dfa3430d76ba1e6b1a849d9d2f2549859c6384927b5c30bd926e8ad"} {"level":"info","ts":"2026-07-20T20:00:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdc5de8960bf6b3d742ed2539f5d67032152a6fbb0d7c5a9b65f79bece007265"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/033e39b96990c6aa586d75aeba1fe5a9d411906729509432d515cfd794f19992"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/824c6916051053de1df8714f5465a9346f0d7902330088da11b581282ffbd38a"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d61e07247adc81b72d352ee8412632ea0fad7782f90d708add2769ee9d354a8d"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54d80f69febce5d7aba9aac5c5c965ad73eb1bb4c444d85fbd057dd23c6cf31c"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23bfeb2147613fef7d3d49aa8686cf937a9b8e35c7d0478c34ca5be9310b4cf8"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfeab4ba0ef41f8e3b7d4c05e6b53b79bbdd195b62924cc8692b0c180d14b38b"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/786def785f9948748c33941bf4a02d24571926f0023840edf9b97c8ca22390a0"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86b47fb73cd44d8d80bf6d1e7388c267ffcc2f40165f8fa89544a5e1a61dc809"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4872b1e00c557e4cc39dc2740c485cf85b94f6781e0f140c5f932fbf2add28"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3024036d1559577876f9e8ed84aaf1596a544fe3df6ebba6fe10d5c43b325876"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6a8b3e17e3917774c9886bd0076fb887f51a33b450ec2fd2e293009aeeaf289"} {"level":"info","ts":"2026-07-20T20:00:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8c4ef44c9e0fa10f308a3e2cdf1dc839e3a721000d8b5cebf7b2e3caddf4cb"}