--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-20T19:41:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac993938-291c-4178-9bd0-0eb16a5cc306","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10GmLuLmSUsQyNuD5_BJEksfISjQrNArzpdnt9rGhBjL0PQVJUSPsN89WyJvf"} {"level":"debug","ts":"2026-07-20T19:41:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac993938-291c-4178-9bd0-0eb16a5cc306","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10GmLuLmSUsQyNuD5_BJEksfISjQrNArzpdnt9rGhBjL0PQVJUSPsN89WyJvf\"}"} {"level":"debug","ts":"2026-07-20T19:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac993938-291c-4178-9bd0-0eb16a5cc306","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-20T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac993938-291c-4178-9bd0-0eb16a5cc306","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac993938-291c-4178-9bd0-0eb16a5cc306","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ac993938-291c-4178-9bd0-0eb16a5cc306","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-20T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac993938-291c-4178-9bd0-0eb16a5cc306","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-20T19:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac993938-291c-4178-9bd0-0eb16a5cc306","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"error","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"debug","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56500","PortSpecifier":{"PortValue":56500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb0ca531-d657-4d74-83a0-420b4e24626a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56500","PortSpecifier":{"PortValue":56500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576526,"nanos":214396961},"http":{"id":"fb0ca531-d657-4d74-83a0-420b4e24626a","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/auth-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb0ca531-d657-4d74-83a0-420b4e24626a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbe080fd-7361-482a-afde-5007710d72c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58646","PortSpecifier":{"PortValue":58646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbe080fd-7361-482a-afde-5007710d72c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbe080fd-7361-482a-afde-5007710d72c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58646","PortSpecifier":{"PortValue":58646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576526,"nanos":247433068},"http":{"id":"fbe080fd-7361-482a-afde-5007710d72c2","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbe080fd-7361-482a-afde-5007710d72c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbe080fd-7361-482a-afde-5007710d72c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbe080fd-7361-482a-afde-5007710d72c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe080fd-7361-482a-afde-5007710d72c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe080fd-7361-482a-afde-5007710d72c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbe080fd-7361-482a-afde-5007710d72c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/auth-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbe080fd-7361-482a-afde-5007710d72c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbe080fd-7361-482a-afde-5007710d72c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbe080fd-7361-482a-afde-5007710d72c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbe080fd-7361-482a-afde-5007710d72c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbe080fd-7361-482a-afde-5007710d72c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10610a9d-3173-4418-a483-102ff4adb007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56508","PortSpecifier":{"PortValue":56508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10610a9d-3173-4418-a483-102ff4adb007","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10610a9d-3173-4418-a483-102ff4adb007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56508","PortSpecifier":{"PortValue":56508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576526,"nanos":287121059},"http":{"id":"10610a9d-3173-4418-a483-102ff4adb007","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10610a9d-3173-4418-a483-102ff4adb007","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10610a9d-3173-4418-a483-102ff4adb007","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10610a9d-3173-4418-a483-102ff4adb007","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10610a9d-3173-4418-a483-102ff4adb007","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10610a9d-3173-4418-a483-102ff4adb007","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10610a9d-3173-4418-a483-102ff4adb007","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/auth-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10610a9d-3173-4418-a483-102ff4adb007","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10610a9d-3173-4418-a483-102ff4adb007","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10610a9d-3173-4418-a483-102ff4adb007","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10610a9d-3173-4418-a483-102ff4adb007","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10610a9d-3173-4418-a483-102ff4adb007","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d934507f-e662-4248-9e6f-6cb580249564","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58654","PortSpecifier":{"PortValue":58654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d934507f-e662-4248-9e6f-6cb580249564","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d934507f-e662-4248-9e6f-6cb580249564","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58654","PortSpecifier":{"PortValue":58654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576526,"nanos":324780203},"http":{"id":"d934507f-e662-4248-9e6f-6cb580249564","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d934507f-e662-4248-9e6f-6cb580249564","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d934507f-e662-4248-9e6f-6cb580249564","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d934507f-e662-4248-9e6f-6cb580249564","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d934507f-e662-4248-9e6f-6cb580249564","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d934507f-e662-4248-9e6f-6cb580249564","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d934507f-e662-4248-9e6f-6cb580249564","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/auth-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d934507f-e662-4248-9e6f-6cb580249564","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d934507f-e662-4248-9e6f-6cb580249564","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d934507f-e662-4248-9e6f-6cb580249564","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d934507f-e662-4248-9e6f-6cb580249564","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d934507f-e662-4248-9e6f-6cb580249564","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"error","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"error","ts":"2026-07-20T19:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f13880-db09-4075-9465-fe15a2267540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55448","PortSpecifier":{"PortValue":55448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0f13880-db09-4075-9465-fe15a2267540","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f13880-db09-4075-9465-fe15a2267540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55448","PortSpecifier":{"PortValue":55448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576543,"nanos":703041085},"http":{"id":"a0f13880-db09-4075-9465-fe15a2267540","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0f13880-db09-4075-9465-fe15a2267540","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0f13880-db09-4075-9465-fe15a2267540","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0f13880-db09-4075-9465-fe15a2267540","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f13880-db09-4075-9465-fe15a2267540","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f13880-db09-4075-9465-fe15a2267540","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f13880-db09-4075-9465-fe15a2267540","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/auth-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0f13880-db09-4075-9465-fe15a2267540","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f13880-db09-4075-9465-fe15a2267540","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f13880-db09-4075-9465-fe15a2267540","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f13880-db09-4075-9465-fe15a2267540","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f13880-db09-4075-9465-fe15a2267540","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57328","PortSpecifier":{"PortValue":57328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57328","PortSpecifier":{"PortValue":57328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576543,"nanos":741186256},"http":{"id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/auth-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"148baef3-0ded-4a9c-99ae-ac0daec77fc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57330","PortSpecifier":{"PortValue":57330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","method":"GET","path":"/maas-api/v1/api-keys/743161ef-87e7-4ff0-bc63-e4f3fde7aa05","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57330","PortSpecifier":{"PortValue":57330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576543,"nanos":782748418},"http":{"id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","method":"GET","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/743161ef-87e7-4ff0-bc63-e4f3fde7aa05",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/743161ef-87e7-4ff0-bc63-e4f3fde7aa05",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/auth-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebcaa2d8-6ab0-4fa7-a015-8045774a8109","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55452","PortSpecifier":{"PortValue":55452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","method":"GET","path":"/maas-api/v1/api-keys/743161ef-87e7-4ff0-bc63-e4f3fde7aa05","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55452","PortSpecifier":{"PortValue":55452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576543,"nanos":814433426},"http":{"id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","method":"GET","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/743161ef-87e7-4ff0-bc63-e4f3fde7aa05",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/743161ef-87e7-4ff0-bc63-e4f3fde7aa05",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/auth-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f80f7ff1-74e1-4d3a-a603-f9f3f9eef07c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"error","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"error","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:42:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41590","PortSpecifier":{"PortValue":41590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41590","PortSpecifier":{"PortValue":41590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576561,"nanos":123733251},"http":{"id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/auth-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9645c09-aa17-4f7c-a0c4-aaf10f4a87e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60910","PortSpecifier":{"PortValue":60910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60910","PortSpecifier":{"PortValue":60910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576561,"nanos":160569330},"http":{"id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/auth-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6744b123-980d-4a82-8f39-eca2c5d09bb1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53515f9c-789c-42e4-b958-bec9f5740968","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41604","PortSpecifier":{"PortValue":41604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53515f9c-789c-42e4-b958-bec9f5740968","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53515f9c-789c-42e4-b958-bec9f5740968","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41604","PortSpecifier":{"PortValue":41604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576561,"nanos":200188004},"http":{"id":"53515f9c-789c-42e4-b958-bec9f5740968","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YT58WEsaCrlw5DMJ_PL7ka120fts9vbAfR8MMVHcg1SoGL0sAZLHoZAAsLwH"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YT58WEsaCrlw5DMJ_PL7ka120fts9vbAfR8MMVHcg1SoGL0sAZLHoZAAsLwH\"}"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d9bd1ec-ad50-41dd-abe8-5c2050526dde","keyName":"e2e-auth-iso-a-3af680","subscription":"e2e-auth-iso-6f5aa1","tenant":"e2e-shared-a-037874","userId":"6d9bd1ec-ad50-41dd-abe8-5c2050526dde","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53515f9c-789c-42e4-b958-bec9f5740968","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/auth-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6f5aa1"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53515f9c-789c-42e4-b958-bec9f5740968","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53515f9c-789c-42e4-b958-bec9f5740968","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:42:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53515f9c-789c-42e4-b958-bec9f5740968","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45c196c0bcd9191c73df6a004b25775436c7be959eea9dd25910681c3f23a88f"} {"level":"info","ts":"2026-07-20T19:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d53961483f2ba05c214611be8ed5522a7a72caf7967034550f1aed5fa4956fc"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/511841780d7f780c466e715f8b7bae9bfdee58c4b08a7d9e920abb013ce5e168"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea2272db6168ff6cb60832732380285ccbfeb695e5b45b37fbcaf4f93ccde60c"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8c40b2f35db85413a2f3c614021c02684a2a644e135546ccacd499d84fedc6d"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6e37596f2478e664fbfb01541d1522d05143ae132c8491d3238d05aa66d8252"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/819f06a8f72ce91a37aea1a2b3900ec2b6d025756f8dcae5f203cbb6cdee9c66"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9af2e2e0e1683b4ac2c2526ed3b254de4792f2b9abf30a15572f684ab93653a6"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/498142a93da5fbd055f2828ebb5cccefceb895a6c7d6632548b42f8082a3c816"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b29b4ecc56a64588b1004a6a9fddbab8fed11e92d17c8c81d33b8aed3da659c8"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96d445c818cf905322ea901185bb3dc73e2d5c9dcd00fb94a57316d0195e3375"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dfd360ee7568c1c0287ec8551146af7e4b8dd44713788ee316fab5b11c71e1c"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ba4e5d43243596173f2a6acbd59f3e905eaca22f4e2a2f9ce39c567b3a7738"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d07a7ba105e88aea0c15fc4bdd3892512d342b719ae0aacc913c54006b5eec"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b79954a2338a415a5a00ac609350dea6f0e0c2f2fb63d699ebb68224acba99e"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/144cae42165482fb071af4e67aa9ee17ac5cc2c922152f39d3f78bc0cbe942c3"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:42:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c"} {"level":"error","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98405a5bcf1bc5f56e10d9bee200ba498691459bb8485257ad11a284fc8c1fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98405a5bcf1bc5f56e10d9bee200ba498691459bb8485257ad11a284fc8c1fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98405a5bcf1bc5f56e10d9bee200ba498691459bb8485257ad11a284fc8c1fdf"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98405a5bcf1bc5f56e10d9bee200ba498691459bb8485257ad11a284fc8c1fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98405a5bcf1bc5f56e10d9bee200ba498691459bb8485257ad11a284fc8c1fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98405a5bcf1bc5f56e10d9bee200ba498691459bb8485257ad11a284fc8c1fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98405a5bcf1bc5f56e10d9bee200ba498691459bb8485257ad11a284fc8c1fdf"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98405a5bcf1bc5f56e10d9bee200ba498691459bb8485257ad11a284fc8c1fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c85d0d2b0443863babd670f2deedf82646e6c57d38793c648cd983985191f1"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c1d10bb15d85b4522a26580343ecad523638e6bf981395e6dfabd6225802520"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6627518e9fbe359ba5986ff72e62d32ed1281a6c52ebc60dd7c7d472c0ebe552"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e20d13fdec918e6e3a5f71ae5d7cf059b4bf5613da4a00019f2190663f2bf1"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c85d0d2b0443863babd670f2deedf82646e6c57d38793c648cd983985191f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49c85d0d2b0443863babd670f2deedf82646e6c57d38793c648cd983985191f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c85d0d2b0443863babd670f2deedf82646e6c57d38793c648cd983985191f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c1d10bb15d85b4522a26580343ecad523638e6bf981395e6dfabd6225802520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c1d10bb15d85b4522a26580343ecad523638e6bf981395e6dfabd6225802520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9665c250cf64ec821aba340f19732e4bacac74a6832582b5c7e29d32edd4a89d"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583d88c9efdd7bc03e114a7d0185d30984ad2e76d03743ba3fa8c8e62ea4eaf8"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c1d10bb15d85b4522a26580343ecad523638e6bf981395e6dfabd6225802520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe5e2db365b62a071766f1cf8cc077f63fd5a9a7527bbe28603e8e8748a00226"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6627518e9fbe359ba5986ff72e62d32ed1281a6c52ebc60dd7c7d472c0ebe552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6627518e9fbe359ba5986ff72e62d32ed1281a6c52ebc60dd7c7d472c0ebe552"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c85d0d2b0443863babd670f2deedf82646e6c57d38793c648cd983985191f1"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c1d10bb15d85b4522a26580343ecad523638e6bf981395e6dfabd6225802520"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6627518e9fbe359ba5986ff72e62d32ed1281a6c52ebc60dd7c7d472c0ebe552","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00e20d13fdec918e6e3a5f71ae5d7cf059b4bf5613da4a00019f2190663f2bf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00e20d13fdec918e6e3a5f71ae5d7cf059b4bf5613da4a00019f2190663f2bf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00e20d13fdec918e6e3a5f71ae5d7cf059b4bf5613da4a00019f2190663f2bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6627518e9fbe359ba5986ff72e62d32ed1281a6c52ebc60dd7c7d472c0ebe552"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00e20d13fdec918e6e3a5f71ae5d7cf059b4bf5613da4a00019f2190663f2bf1"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9665c250cf64ec821aba340f19732e4bacac74a6832582b5c7e29d32edd4a89d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9665c250cf64ec821aba340f19732e4bacac74a6832582b5c7e29d32edd4a89d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9665c250cf64ec821aba340f19732e4bacac74a6832582b5c7e29d32edd4a89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583d88c9efdd7bc03e114a7d0185d30984ad2e76d03743ba3fa8c8e62ea4eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["583d88c9efdd7bc03e114a7d0185d30984ad2e76d03743ba3fa8c8e62ea4eaf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9665c250cf64ec821aba340f19732e4bacac74a6832582b5c7e29d32edd4a89d"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583d88c9efdd7bc03e114a7d0185d30984ad2e76d03743ba3fa8c8e62ea4eaf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe5e2db365b62a071766f1cf8cc077f63fd5a9a7527bbe28603e8e8748a00226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe5e2db365b62a071766f1cf8cc077f63fd5a9a7527bbe28603e8e8748a00226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583d88c9efdd7bc03e114a7d0185d30984ad2e76d03743ba3fa8c8e62ea4eaf8"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe5e2db365b62a071766f1cf8cc077f63fd5a9a7527bbe28603e8e8748a00226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe5e2db365b62a071766f1cf8cc077f63fd5a9a7527bbe28603e8e8748a00226"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c85d0d2b0443863babd670f2deedf82646e6c57d38793c648cd983985191f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c1d10bb15d85b4522a26580343ecad523638e6bf981395e6dfabd6225802520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6627518e9fbe359ba5986ff72e62d32ed1281a6c52ebc60dd7c7d472c0ebe552","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00e20d13fdec918e6e3a5f71ae5d7cf059b4bf5613da4a00019f2190663f2bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9665c250cf64ec821aba340f19732e4bacac74a6832582b5c7e29d32edd4a89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583d88c9efdd7bc03e114a7d0185d30984ad2e76d03743ba3fa8c8e62ea4eaf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe5e2db365b62a071766f1cf8cc077f63fd5a9a7527bbe28603e8e8748a00226","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e"} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e"} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e"} {"level":"info","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42382","PortSpecifier":{"PortValue":42382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42382","PortSpecifier":{"PortValue":42382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576614,"nanos":833017302},"http":{"id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/sub-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9986cda-ac7f-4cbc-af8f-b80e388a34b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43272","PortSpecifier":{"PortValue":43272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43272","PortSpecifier":{"PortValue":43272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576614,"nanos":871712581},"http":{"id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/sub-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"388a4d86-fe47-4ad3-b624-c9a0a0658af4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42392","PortSpecifier":{"PortValue":42392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65bf155a-ae42-4e3a-9049-0613442c8f07","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42392","PortSpecifier":{"PortValue":42392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576614,"nanos":910337897},"http":{"id":"65bf155a-ae42-4e3a-9049-0613442c8f07","method":"GET","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NaRrKqBTbz0t2Qfa_2uHeqGet1A62feGPYYMfGRK14Y1w1q9uaPru8yJM6Qh"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NaRrKqBTbz0t2Qfa_2uHeqGet1A62feGPYYMfGRK14Y1w1q9uaPru8yJM6Qh\"}"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de120a1e-0b01-4ed2-a6cb-f10005db1551","keyName":"e2e-sub-iso-a661e4","subscription":"e2e-a-only-91e7fd","tenant":"e2e-shared-a-037874","userId":"de120a1e-0b01-4ed2-a6cb-f10005db1551","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/sub-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-91e7fd"} {"level":"info","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65bf155a-ae42-4e3a-9049-0613442c8f07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43276","PortSpecifier":{"PortValue":43276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43276","PortSpecifier":{"PortValue":43276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576614,"nanos":942019050},"http":{"id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","method":"GET","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZKTleOLErLAo7Y3Z_KftZ0U2Hl4ZF6Ok43uz7DlQoVSCY3mtosngtNO069Gt"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZKTleOLErLAo7Y3Z_KftZ0U2Hl4ZF6Ok43uz7DlQoVSCY3mtosngtNO069Gt\"}"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a53acff7-8c02-4ea4-9316-6df42719aa91","keyName":"e2e-sub-iso-3b1cb7","subscription":"e2e-b-only-91e7fd","tenant":"e2e-shared-b-e35917","userId":"a53acff7-8c02-4ea4-9316-6df42719aa91","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/sub-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-91e7fd"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:43:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff44e8e2-c9f7-449a-ab35-64a98c82a47d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60744","PortSpecifier":{"PortValue":60744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60744","PortSpecifier":{"PortValue":60744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576625,"nanos":332184047},"http":{"id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/sub-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c9490df-e282-42e5-83b9-fee6ec2b4d9d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55018","PortSpecifier":{"PortValue":55018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e898a8bb-fcf3-4a3d-8849-b23208803571","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55018","PortSpecifier":{"PortValue":55018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576625,"nanos":373829057},"http":{"id":"e898a8bb-fcf3-4a3d-8849-b23208803571","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/sub-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e898a8bb-fcf3-4a3d-8849-b23208803571","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60748","PortSpecifier":{"PortValue":60748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abec20b8-349c-4afb-8905-9bb9b0801693","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60748","PortSpecifier":{"PortValue":60748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576625,"nanos":414785752},"http":{"id":"abec20b8-349c-4afb-8905-9bb9b0801693","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EMLMyujx6osZbu06_GClgwFhGkMjCQuthb0jzpGolom0MKAqGiMW4KZG3t4c"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EMLMyujx6osZbu06_GClgwFhGkMjCQuthb0jzpGolom0MKAqGiMW4KZG3t4c\"}"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66fe36a4-27a9-4fdd-b330-9aeaca16f5ff","keyName":"e2e-sub-iso-0b9665","subscription":"e2e-shared-sub-b902bd","tenant":"e2e-shared-a-037874","userId":"66fe36a4-27a9-4fdd-b330-9aeaca16f5ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/sub-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b902bd"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abec20b8-349c-4afb-8905-9bb9b0801693","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55028","PortSpecifier":{"PortValue":55028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc2089c4-f166-4a87-89c0-828727a67a0f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55028","PortSpecifier":{"PortValue":55028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576625,"nanos":442868593},"http":{"id":"cc2089c4-f166-4a87-89c0-828727a67a0f","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rxmYo8cIM7aiOy01_IUta72WsaoWK2ogXPL6S8E3FMfWHmuQyyBTWlTJzAhS"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rxmYo8cIM7aiOy01_IUta72WsaoWK2ogXPL6S8E3FMfWHmuQyyBTWlTJzAhS\"}"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5ed981ab-688a-49c1-90cf-df4a6814ce68","keyName":"e2e-sub-iso-814451","subscription":"e2e-shared-sub-b902bd","tenant":"e2e-shared-b-e35917","userId":"5ed981ab-688a-49c1-90cf-df4a6814ce68","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/sub-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b902bd"} {"level":"info","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:43:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc2089c4-f166-4a87-89c0-828727a67a0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:43:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/938301783dc3c9bd58fba3d043320c91ef497da957127e0a845bc749dcd13e3c"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/583d88c9efdd7bc03e114a7d0185d30984ad2e76d03743ba3fa8c8e62ea4eaf8"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe5e2db365b62a071766f1cf8cc077f63fd5a9a7527bbe28603e8e8748a00226"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6627518e9fbe359ba5986ff72e62d32ed1281a6c52ebc60dd7c7d472c0ebe552"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49c85d0d2b0443863babd670f2deedf82646e6c57d38793c648cd983985191f1"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6550d0edf9ed2f072a50309e6761ebc6e4674bc94255102b0147d4e5c41f5a45"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faf0a2d9ab05f3971ffa7d8984e05d7ae4f1030c2de8303f076eaa4dab696a16"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9665c250cf64ec821aba340f19732e4bacac74a6832582b5c7e29d32edd4a89d"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:43:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6057559e89e6506daccd8abd36df745f100e993a436691462d34100c3c137110"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b151d4af2a16bceab6f1d4d61699b9c91e688331a2ccbdd87cc8097186fc57a"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28ef9afd4858792b805be6c49939fa711096b3db479e7f551d333c5c05cea92e"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98405a5bcf1bc5f56e10d9bee200ba498691459bb8485257ad11a284fc8c1fdf"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/354e9632cb40af329c0c475ec885d6a681539fd7737356fd632ca61bc1ab8b6b"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00e20d13fdec918e6e3a5f71ae5d7cf059b4bf5613da4a00019f2190663f2bf1"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c1d10bb15d85b4522a26580343ecad523638e6bf981395e6dfabd6225802520"} {"level":"info","ts":"2026-07-20T19:43:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6feeaa0f84f6db0b49f6f9692d7b658bde4e4f770057dd6c71a4de1f5554f21e"} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e"} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"error","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T19:44:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T19:44:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34308","PortSpecifier":{"PortValue":34308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26c5f940-689d-4397-89ea-0f1c67a326c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34308","PortSpecifier":{"PortValue":34308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576686,"nanos":248537631},"http":{"id":"26c5f940-689d-4397-89ea-0f1c67a326c8","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26c5f940-689d-4397-89ea-0f1c67a326c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48012","PortSpecifier":{"PortValue":48012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48012","PortSpecifier":{"PortValue":48012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576686,"nanos":295515565},"http":{"id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2b1cc4-8fee-4749-ac75-8b79afd5a992","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34322","PortSpecifier":{"PortValue":34322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34322","PortSpecifier":{"PortValue":34322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576686,"nanos":341367378},"http":{"id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a25e3b1-9ed9-448b-baf6-53a2355b4b35","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576687,"nanos":406414019},"http":{"id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05b42c98-f6d6-46ee-9157-4d83cdc08a89","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edec8379-e543-4042-893c-649916dde97c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34342","PortSpecifier":{"PortValue":34342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edec8379-e543-4042-893c-649916dde97c","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edec8379-e543-4042-893c-649916dde97c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34342","PortSpecifier":{"PortValue":34342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576688,"nanos":446330575},"http":{"id":"edec8379-e543-4042-893c-649916dde97c","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edec8379-e543-4042-893c-649916dde97c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edec8379-e543-4042-893c-649916dde97c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edec8379-e543-4042-893c-649916dde97c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edec8379-e543-4042-893c-649916dde97c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edec8379-e543-4042-893c-649916dde97c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edec8379-e543-4042-893c-649916dde97c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34356","PortSpecifier":{"PortValue":34356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02e78427-78e5-4ee3-9291-a26990dbf67c","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34356","PortSpecifier":{"PortValue":34356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576689,"nanos":485787054},"http":{"id":"02e78427-78e5-4ee3-9291-a26990dbf67c","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02e78427-78e5-4ee3-9291-a26990dbf67c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34362","PortSpecifier":{"PortValue":34362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3899bf6c-2224-4147-982d-5fab2fab89f2","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34362","PortSpecifier":{"PortValue":34362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576690,"nanos":523234368},"http":{"id":"3899bf6c-2224-4147-982d-5fab2fab89f2","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3899bf6c-2224-4147-982d-5fab2fab89f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34374","PortSpecifier":{"PortValue":34374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34374","PortSpecifier":{"PortValue":34374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576691,"nanos":586964904},"http":{"id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbcbfb6b-8f3f-4e0d-8b76-8f14fa5fe3f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34390","PortSpecifier":{"PortValue":34390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34390","PortSpecifier":{"PortValue":34390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576692,"nanos":628783520},"http":{"id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b279f8cd-4c80-4372-bb3b-edff8f8d1c87","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34392","PortSpecifier":{"PortValue":34392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76e164b2-90cc-4317-b2e4-020b09e288d4","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34392","PortSpecifier":{"PortValue":34392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576693,"nanos":666917361},"http":{"id":"76e164b2-90cc-4317-b2e4-020b09e288d4","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa"} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZfWp6eLHiDITBCXk_sXocKfDDsizyOHmFPT3yNzYNgWo2MjVLAJieQDQ8Taa\"}"} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","subscription":"e2e-rate-iso-a-ce024f","tenant":"e2e-shared-a-037874","userId":"80a13db9-a4db-4286-ad87-17ded4a617ed","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-ce024f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce024f"} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80a13db9-a4db-4286-ad87-17ded4a617ed","keyName":"e2e-rate-a-ce024f","selected_subscription":"e2e-rate-iso-a-ce024f","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-ce024f@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce024f","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:44:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76e164b2-90cc-4317-b2e4-020b09e288d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576702,"nanos":605918105},"http":{"id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8f6dd06-7df0-49ee-8c66-5bcfa04989c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576702,"nanos":648303795},"http":{"id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3625267f-fc17-4f60-9abd-71ff8f836624","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"]}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8382803aa0a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=238d8bf2-52ff-46ee-99f9-5ec3e060836e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3625267f-fc17-4f60-9abd-71ff8f836624","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a89f987-0116-4beb-a357-7a8b78a9bd53","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66715172-3677-4c30-b9a8-708295e030d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60490","PortSpecifier":{"PortValue":60490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66715172-3677-4c30-b9a8-708295e030d7","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66715172-3677-4c30-b9a8-708295e030d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60490","PortSpecifier":{"PortValue":60490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576702,"nanos":700043448},"http":{"id":"66715172-3677-4c30-b9a8-708295e030d7","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO\"}"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","subscription":"e2e-rate-iso-a-9742f7","tenant":"e2e-shared-a-037874","userId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-9742f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66715172-3677-4c30-b9a8-708295e030d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9742f7"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66715172-3677-4c30-b9a8-708295e030d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","selected_subscription":"e2e-rate-iso-a-9742f7","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-9742f7@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66715172-3677-4c30-b9a8-708295e030d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:45:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66715172-3677-4c30-b9a8-708295e030d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60504","PortSpecifier":{"PortValue":60504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60504","PortSpecifier":{"PortValue":60504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576703,"nanos":739918944},"http":{"id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO"} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO\"}"} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","subscription":"e2e-rate-iso-a-9742f7","tenant":"e2e-shared-a-037874","userId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-9742f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9742f7"} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","selected_subscription":"e2e-rate-iso-a-9742f7","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-9742f7@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:45:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cef0f8c-e5f0-43a2-9bbd-e6a3a03802fa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59176","PortSpecifier":{"PortValue":59176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"644e0181-1212-462c-91b1-5ca029f8ef17","method":"POST","path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions","host":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59176","PortSpecifier":{"PortValue":59176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576704,"nanos":778549272},"http":{"id":"644e0181-1212-462c-91b1-5ca029f8ef17","method":"POST","headers":{":authority":"e2e-shared-a-037874.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-037874/rate-test-model-037874/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pgJFq5ZtpGRV1WU7_juH9pP4H1YwmQMTL2rnI0K5HkppNsx7U2pBjFxMRvwO\"}"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","subscription":"e2e-rate-iso-a-9742f7","tenant":"e2e-shared-a-037874","userId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\",\"requestedSubscription\":\"e2e-rate-iso-a-9742f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-037874.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-037874/rate-test-model-037874\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-037874/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9742f7"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f7d751d1-67b9-4b2e-bb69-ba65eaf2e1c2","keyName":"e2e-rate-a-9742f7","selected_subscription":"e2e-rate-iso-a-9742f7","selected_subscription_key":"ai-tenant-e2e-shared-a-037874/e2e-rate-iso-a-9742f7@ai-tenant-e2e-shared-a-037874/rate-test-model-037874","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-037874","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9742f7","namespace":"ai-tenant-e2e-shared-a-037874","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-037874/rate-test-model-037874"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"644e0181-1212-462c-91b1-5ca029f8ef17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45926","PortSpecifier":{"PortValue":45926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","method":"POST","path":"/ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917/v1/completions","host":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45926","PortSpecifier":{"PortValue":45926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784576704,"nanos":821421842},"http":{"id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","method":"POST","headers":{":authority":"e2e-shared-b-e35917.apps.eb178803-ee9f-451a-a335-f8382803aa0a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7tarfl1z2V3a1OGW_G0sNZFu77olYTMXyIglwXDQEwBCOcg7IqtxGRULTUR2"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7tarfl1z2V3a1OGW_G0sNZFu77olYTMXyIglwXDQEwBCOcg7IqtxGRULTUR2\"}"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a3b3f54-bc69-46b1-8864-3def52ba3588","keyName":"e2e-rate-b-9742f7","subscription":"e2e-rate-iso-b-9742f7","tenant":"e2e-shared-b-e35917","userId":"3a3b3f54-bc69-46b1-8864-3def52ba3588","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917\",\"requestedSubscription\":\"e2e-rate-iso-b-9742f7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e35917.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e35917","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9742f7","namespace":"ai-tenant-e2e-shared-b-e35917","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917"}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e35917/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9742f7"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3a3b3f54-bc69-46b1-8864-3def52ba3588","keyName":"e2e-rate-b-9742f7","selected_subscription":"e2e-rate-iso-b-9742f7","selected_subscription_key":"ai-tenant-e2e-shared-b-e35917/e2e-rate-iso-b-9742f7@ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e35917","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9742f7","namespace":"ai-tenant-e2e-shared-b-e35917","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e35917/rate-test-model-e35917"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T19:45:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"691ea4e0-1f35-4e0d-b920-7069c6c2ff70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fb510cadebc9ffc0f978f7eb46a453a0210bd28b4a98b372a8f8bdb1b18be25"} {"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bcdf8765e8ab292df1fab6847ebecf02cbaecb91b5d3f61f35e49d991ec7279"} {"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6815c13190f667eefd60b9d01baa4acaa30bb80123b675788089e021446ab74d"} {"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be63174c89ef5d9f7443c79b816f8735fe724768dc2ea1d90f713e1c52f65b42"} {"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e128466c98e5ad3a4aad0f1e68977eb0afd3b4846f1148174e43a152e18593d0"} {"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de60c9ef2b27aa1860741790bc69bda220314e6b87876ba1817f517f448b94d0"} {"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07a87e91e8cd6b494f561f396317d4903a49e63921bf839f7c20ae6e050d011c"} {"level":"info","ts":"2026-07-20T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a505f9d04073b502f6467e86e8a54e1fca0abf7025db46c0e52b043dbb714193"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cea45d49003ec657187c7ce0127d255a92e80c28551a68421659c9af3e3dbada"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd8c1a96d4582a7e973f7657c6453d49bd83c02b9e64ed4f1c1a663cd281e929"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35ef95109e6ddd24b267a900267d847b6feb3187442709ec623b8b7c9289877d"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79ffff92160ce5171b000a54e50084873a377617a4d0997f465aa897429e1864"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17d4be3a4b2271cf07f7b5268ef038a7fad85958d38fbd4ee05bd52f96499222"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/846bf6291aabf5099a890b80a67c3296e2e491dd6908075587fcfdc1bed20faf"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2062e2f69bd4697bf78484e6234a8fe0c3917a09d6cab256df6ae247bd5392d"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83850bf4da9213d6a740bc8760be75b990c975d0431457e22cf60731abf69b3b"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ba0305ce898c472c71d0ba1d7d4a364ce6156f949cbe313f8cff36b8d2cc8e1"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9317efbfd970b2b6102aaa29edf54410c9ea7afc1f96dcf6bf44027e56112f1"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17dd8cc9352681e9539288c9903feba056d62f4b4db7388118c34e303060b2f2"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc40397e4e0faaecdb77e062b46ceeb65189e638f8afe45f1678909950068fe3"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c78b8ef5b85fed7d5aba867ec713e5a553e20de77d599f259467cec6c5530ac1"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2097eff8a4d154280261e7cc3a2a14f026f70d397dfc65ba555c393b34a477c9"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4bb950dc4da309677fefdcb2b764f823b1e0e8f132d2af09ac5ef0731a3284e"} {"level":"info","ts":"2026-07-20T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288cdf03faa9f8c0bb781804a6f7415bccacc484e0b496e6f5820a71916830a5"}