--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"info","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"error","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60270","PortSpecifier":{"PortValue":60270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60270","PortSpecifier":{"PortValue":60270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653562,"nanos":908960023},"http":{"id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/auth-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3485dd4c-5e91-4841-86b6-d4482f4bc182","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43404","PortSpecifier":{"PortValue":43404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43404","PortSpecifier":{"PortValue":43404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653562,"nanos":995853953},"http":{"id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/auth-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d81c897-2a9b-43a8-b7fc-dd640a2e441d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60286","PortSpecifier":{"PortValue":60286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60286","PortSpecifier":{"PortValue":60286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653563,"nanos":31403850},"http":{"id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/auth-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4165ac0-34a1-4002-a6a0-784ce9db0325","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e248145d-74d9-430e-a75e-ea59530efd34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43408","PortSpecifier":{"PortValue":43408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e248145d-74d9-430e-a75e-ea59530efd34","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e248145d-74d9-430e-a75e-ea59530efd34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43408","PortSpecifier":{"PortValue":43408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653563,"nanos":104255825},"http":{"id":"e248145d-74d9-430e-a75e-ea59530efd34","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e248145d-74d9-430e-a75e-ea59530efd34","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e248145d-74d9-430e-a75e-ea59530efd34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e248145d-74d9-430e-a75e-ea59530efd34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e248145d-74d9-430e-a75e-ea59530efd34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e248145d-74d9-430e-a75e-ea59530efd34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e248145d-74d9-430e-a75e-ea59530efd34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/auth-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e248145d-74d9-430e-a75e-ea59530efd34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e248145d-74d9-430e-a75e-ea59530efd34","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e248145d-74d9-430e-a75e-ea59530efd34","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e248145d-74d9-430e-a75e-ea59530efd34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e248145d-74d9-430e-a75e-ea59530efd34","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"error","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"info","ts":"2026-07-21T17:06:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a6651e4-c759-4620-b51e-3a769556e941","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55146","PortSpecifier":{"PortValue":55146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a6651e4-c759-4620-b51e-3a769556e941","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a6651e4-c759-4620-b51e-3a769556e941","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55146","PortSpecifier":{"PortValue":55146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653580,"nanos":262465743},"http":{"id":"9a6651e4-c759-4620-b51e-3a769556e941","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a6651e4-c759-4620-b51e-3a769556e941","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a6651e4-c759-4620-b51e-3a769556e941","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a6651e4-c759-4620-b51e-3a769556e941","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a6651e4-c759-4620-b51e-3a769556e941","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a6651e4-c759-4620-b51e-3a769556e941","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a6651e4-c759-4620-b51e-3a769556e941","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/auth-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a6651e4-c759-4620-b51e-3a769556e941","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a6651e4-c759-4620-b51e-3a769556e941","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a6651e4-c759-4620-b51e-3a769556e941","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a6651e4-c759-4620-b51e-3a769556e941","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a6651e4-c759-4620-b51e-3a769556e941","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53482","PortSpecifier":{"PortValue":53482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bac662fa-e971-4a40-811d-3f71a76a63e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53482","PortSpecifier":{"PortValue":53482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653580,"nanos":299624266},"http":{"id":"bac662fa-e971-4a40-811d-3f71a76a63e2","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/auth-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac662fa-e971-4a40-811d-3f71a76a63e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53490","PortSpecifier":{"PortValue":53490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","method":"GET","path":"/maas-api/v1/api-keys/18e47859-00b9-4c03-b97f-af065d337eb5","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53490","PortSpecifier":{"PortValue":53490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653580,"nanos":340512611},"http":{"id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","method":"GET","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/18e47859-00b9-4c03-b97f-af065d337eb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/18e47859-00b9-4c03-b97f-af065d337eb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/auth-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437e1ab2-1155-4dca-b3d9-7153af86cda6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55162","PortSpecifier":{"PortValue":55162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","method":"GET","path":"/maas-api/v1/api-keys/18e47859-00b9-4c03-b97f-af065d337eb5","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55162","PortSpecifier":{"PortValue":55162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653580,"nanos":368781918},"http":{"id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","method":"GET","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/18e47859-00b9-4c03-b97f-af065d337eb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/18e47859-00b9-4c03-b97f-af065d337eb5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/auth-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c08a894e-c712-402a-9fb7-878cbc9b5c39","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"error","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"error","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"error","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"error","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"error","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:06:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"error","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:06:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d358a44-aa57-46ec-b92b-398798196b52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45398","PortSpecifier":{"PortValue":45398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d358a44-aa57-46ec-b92b-398798196b52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d358a44-aa57-46ec-b92b-398798196b52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45398","PortSpecifier":{"PortValue":45398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653599,"nanos":594876989},"http":{"id":"8d358a44-aa57-46ec-b92b-398798196b52","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d358a44-aa57-46ec-b92b-398798196b52","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d358a44-aa57-46ec-b92b-398798196b52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d358a44-aa57-46ec-b92b-398798196b52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d358a44-aa57-46ec-b92b-398798196b52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d358a44-aa57-46ec-b92b-398798196b52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d358a44-aa57-46ec-b92b-398798196b52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/auth-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d358a44-aa57-46ec-b92b-398798196b52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d358a44-aa57-46ec-b92b-398798196b52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d358a44-aa57-46ec-b92b-398798196b52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d358a44-aa57-46ec-b92b-398798196b52","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d358a44-aa57-46ec-b92b-398798196b52","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59868","PortSpecifier":{"PortValue":59868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15341974-dd81-489a-8e92-f533f9c73fb6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59868","PortSpecifier":{"PortValue":59868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653599,"nanos":625778486},"http":{"id":"15341974-dd81-489a-8e92-f533f9c73fb6","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/auth-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15341974-dd81-489a-8e92-f533f9c73fb6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45414","PortSpecifier":{"PortValue":45414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45414","PortSpecifier":{"PortValue":45414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653599,"nanos":663130322},"http":{"id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ChumYl46ZG0ISjkm_bOPspwWwtdSc8tiHocAGWtrOT25IFieVnB7KnSdoGrc"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ChumYl46ZG0ISjkm_bOPspwWwtdSc8tiHocAGWtrOT25IFieVnB7KnSdoGrc\"}"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"78a0d200-0334-4f61-8855-36529d73aa9a","keyName":"e2e-auth-iso-a-e82ec2","subscription":"e2e-auth-iso-09b89e","tenant":"e2e-shared-a-07bb43","userId":"78a0d200-0334-4f61-8855-36529d73aa9a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/auth-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-09b89e"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:06:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a1d2818-f2ab-45fe-85e0-bd96950af629","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1be66335008370c86a1f48ea5cc0a1b477e4c24bdb8449b15a5f8e3c64a83c7f"} {"level":"info","ts":"2026-07-21T17:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f3fdc773f30bff40f582538fb59da17049f1bfc6e18ffbde8b9cf075180f46c"} {"level":"info","ts":"2026-07-21T17:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74e0dc0e928aa2b607eb0cfbc3e558271ec15f9f256b2ded30453e986ab82319"} {"level":"info","ts":"2026-07-21T17:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cfdd92b6fe54035ad1a0f877146a86c682f7a0c20c9808a768743e405e70a76"} {"level":"info","ts":"2026-07-21T17:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/792abe1e47fcd66d2bfd7c1e4d659c8d503045e6eb9d635e317f3a83bd67d3c8"} {"level":"info","ts":"2026-07-21T17:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dcbeab30c5d1725b0543118cabf505f8165073ed19aac0b9ad2ceeea1bbc140"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80a7577991611d1f160c34c78273e4e6fb4ec30ff12ae58c8832db17061da415"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/237658880147cdd60f7b40b5c42478fe3d64a7c85799c060e9cfa6e9310dc5e6"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ea9b00d70a89a43a4674701d8246402f046fe07a8f08495f276dd7941ebeea1"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16bd95c31a7c51cacb2c92b39bed99dfd5368e529804940adb19e9db647f63f2"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5386d1ec94a215875727cc2ef829cf02930a3be558a227cb6f2831f2576c1567"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e30417e1eedcc3f9579b034e70d48952b20376a8d7214a4ed9f91656b95501ae"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bb99dd7e564f0478fead9759b4b8aa33f5304e6771ceed01b9f78a3c0b97554"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0000bf2a7c8e06bd99375155df10104c21110862b8a8320f5203bd8467aefba9"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c72ce0cbd4d6d1697179714b52bec50aa77113a62deb3fc6b2e1a4a37b027b32"} {"level":"info","ts":"2026-07-21T17:06:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dee5c35e4ef7a7757811060a7d9682ccb0713bcd2f934fcd74e53453c5099c7f"} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11"} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11"} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"info","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a"} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a"} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:08:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:08:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37146","PortSpecifier":{"PortValue":37146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37146","PortSpecifier":{"PortValue":37146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653726,"nanos":551789486},"http":{"id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/sub-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0d600c7-a2c1-433c-8aac-4b512c6bb792","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41896","PortSpecifier":{"PortValue":41896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41896","PortSpecifier":{"PortValue":41896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653726,"nanos":594863621},"http":{"id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/sub-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ff43bbf-86eb-40a3-9ea1-32dcaf41194b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37158","PortSpecifier":{"PortValue":37158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37158","PortSpecifier":{"PortValue":37158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653726,"nanos":634867105},"http":{"id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","method":"GET","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XdhckDWm8ynC1zDt_aOBxyHaxcL88f9nEfMsL6jqSSWev5bVvB3TYUd8QXvI"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XdhckDWm8ynC1zDt_aOBxyHaxcL88f9nEfMsL6jqSSWev5bVvB3TYUd8QXvI\"}"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"395fe9ee-648f-4a86-9302-0cc6074cd370","keyName":"e2e-sub-iso-41f33e","subscription":"e2e-a-only-78b7d1","tenant":"e2e-shared-a-07bb43","userId":"395fe9ee-648f-4a86-9302-0cc6074cd370","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/sub-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-78b7d1"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a3cf07c-c0e5-4622-8bc5-a63fac1afe55","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41904","PortSpecifier":{"PortValue":41904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41904","PortSpecifier":{"PortValue":41904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653726,"nanos":675477968},"http":{"id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","method":"GET","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-d6J0hghebCLsqDqz_TYPItZ7ITlTRaatfF1GakFLkX7uxVWQmznc2HhGdifm"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e5534.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-d6J0hghebCLsqDqz_TYPItZ7ITlTRaatfF1GakFLkX7uxVWQmznc2HhGdifm\"}"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e5534.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ce69cb4-4edb-4518-bdaa-283e6d9b9240","keyName":"e2e-sub-iso-7a7e6d","subscription":"e2e-b-only-78b7d1","tenant":"e2e-shared-b-1e5534","userId":"7ce69cb4-4edb-4518-bdaa-283e6d9b9240","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/sub-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-78b7d1"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:08:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eef3f97e-c2e7-45c5-9917-4ad35494a00f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e"} {"level":"info","ts":"2026-07-21T17:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"info","ts":"2026-07-21T17:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a"} {"level":"info","ts":"2026-07-21T17:08:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e"} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"debug","ts":"2026-07-21T17:09:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:09:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad"} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47048","PortSpecifier":{"PortValue":47048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47048","PortSpecifier":{"PortValue":47048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653745,"nanos":389744848},"http":{"id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/sub-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"470573e7-9b54-452a-b4f3-94a1fc5f5057","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55756","PortSpecifier":{"PortValue":55756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55756","PortSpecifier":{"PortValue":55756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653745,"nanos":430275284},"http":{"id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/sub-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce29569d-ea40-4c8c-b0d0-8cf97eb3d723","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47064","PortSpecifier":{"PortValue":47064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47064","PortSpecifier":{"PortValue":47064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653745,"nanos":488856309},"http":{"id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Qj7rmc9oXIDS6Yja_qXMeT5vnkMcHusVnZcJLZYhdD1Ov38ldKbHtjumqgyV"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Qj7rmc9oXIDS6Yja_qXMeT5vnkMcHusVnZcJLZYhdD1Ov38ldKbHtjumqgyV\"}"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ab93fc8-ea86-4d36-9451-5b50599e07c4","keyName":"e2e-sub-iso-b53894","subscription":"e2e-shared-sub-aab01b","tenant":"e2e-shared-a-07bb43","userId":"0ab93fc8-ea86-4d36-9451-5b50599e07c4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/sub-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-aab01b"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"175d56cc-931c-462b-9122-49b6a1cb4bc0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55766","PortSpecifier":{"PortValue":55766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55766","PortSpecifier":{"PortValue":55766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653745,"nanos":518674177},"http":{"id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Mqa06PYMFTGSHCrc_69OSELfHRbpkGaAFNSfof0pg5fPJf09oqJzL6YRpaJx"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e5534.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Mqa06PYMFTGSHCrc_69OSELfHRbpkGaAFNSfof0pg5fPJf09oqJzL6YRpaJx\"}"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e5534.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a432b4d-db03-4e0e-b617-13169725f4b1","keyName":"e2e-sub-iso-83325b","subscription":"e2e-shared-sub-aab01b","tenant":"e2e-shared-b-1e5534","userId":"1a432b4d-db03-4e0e-b617-13169725f4b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/sub-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-aab01b"} {"level":"info","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:09:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ad7c42d-c69b-4384-a8f1-eda3e85e3376","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fca3cb54e7eceb9bfda3f04788016045cd1f807d9d053dfd7c86892e2512720"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed60b388f3e1d6a53eae73cd313da1d8c36d2660c1fe1bad3c956c3fef1ebcf3"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09283952e55eb03742b7451678e1146845c621ffcb4a441d6404ba67941b99ca"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d88509dd4abb5ddd19c04467c975f44cb2a3fdec05454774ff7ca4a84e4bfad"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aeba384516fe5e14be6b8d59ff541b1138aeaedc19ae541654eefb196c892a92"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc8b9d54fd6554342be922ba04057bfa7e0b27b9ae7bce94d2c3309974153c1a"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e99abd22515080abe7b2e671dca185657347080c40418061f6baf6ea20e2b32e"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:09:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/228e2928cfd5ef1d1d4fc5d7503924bd03504541f06aefab9c754e2b3860f5bd"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/012fd5fc3e33487b38d8e6c8b87cde147e67f4918d18c0ff5855c64810e63fe9"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7569758f291f84b429df837b26b460528b0439c32d7645bacfaacb9647d11c5b"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ff21355b2d77432b785ebfe7b73381bf9a84e316fc6ecb9cd148af40e9672fd"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31c0d5bec12c038f7fdc4344f85e59808349d78412d24e5983d3e01bf5ca396d"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be98b03590570b3d5234840c9dc9ff2220dd7b86c3751186a9a9967c6c36715"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/475ffa13f21c7d5bd35ed3696df8ef8da8ab003d05a29e50ae7a11deaa90701e"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed9ab7fbd5baa81380d3a6090a64c6074a33540bdd6b6f611d23d1c83a3e3989"} {"level":"info","ts":"2026-07-21T17:09:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c75c7b995c06de2a74967d510728259a2529a027f6cf13987cc76a4cf6620c11"} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957"} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957"} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957"} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957"} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33"} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5"} {"level":"info","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf71e84a353bc9cf2c77da0fb77a780e2a3560248a7a775407322570614cd6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf71e84a353bc9cf2c77da0fb77a780e2a3560248a7a775407322570614cd6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf71e84a353bc9cf2c77da0fb77a780e2a3560248a7a775407322570614cd6f"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf71e84a353bc9cf2c77da0fb77a780e2a3560248a7a775407322570614cd6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebf71e84a353bc9cf2c77da0fb77a780e2a3560248a7a775407322570614cd6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf71e84a353bc9cf2c77da0fb77a780e2a3560248a7a775407322570614cd6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf71e84a353bc9cf2c77da0fb77a780e2a3560248a7a775407322570614cd6f"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebf71e84a353bc9cf2c77da0fb77a780e2a3560248a7a775407322570614cd6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a294fdfc6a3c3869b96d064a6eff16c0b409c0b1087226224e351a5508bdb978"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cde54f2a9f36a8ea5f51be872b13f10197b86f7e3d704d49840003cbc75e33"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56179ded81d56fea62f350cc1c8f73ee4b21113370722fa0560b2f9110738724"} {"level":"info","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a294fdfc6a3c3869b96d064a6eff16c0b409c0b1087226224e351a5508bdb978","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a294fdfc6a3c3869b96d064a6eff16c0b409c0b1087226224e351a5508bdb978"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a294fdfc6a3c3869b96d064a6eff16c0b409c0b1087226224e351a5508bdb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a294fdfc6a3c3869b96d064a6eff16c0b409c0b1087226224e351a5508bdb978"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cde54f2a9f36a8ea5f51be872b13f10197b86f7e3d704d49840003cbc75e33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80cde54f2a9f36a8ea5f51be872b13f10197b86f7e3d704d49840003cbc75e33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cde54f2a9f36a8ea5f51be872b13f10197b86f7e3d704d49840003cbc75e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56179ded81d56fea62f350cc1c8f73ee4b21113370722fa0560b2f9110738724","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56179ded81d56fea62f350cc1c8f73ee4b21113370722fa0560b2f9110738724"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cde54f2a9f36a8ea5f51be872b13f10197b86f7e3d704d49840003cbc75e33"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56179ded81d56fea62f350cc1c8f73ee4b21113370722fa0560b2f9110738724","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/966ff25f21c7323c1f8b59634614e455ce12f0736afe51edd542f2bc4738e31e"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56179ded81d56fea62f350cc1c8f73ee4b21113370722fa0560b2f9110738724"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a294fdfc6a3c3869b96d064a6eff16c0b409c0b1087226224e351a5508bdb978","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cde54f2a9f36a8ea5f51be872b13f10197b86f7e3d704d49840003cbc75e33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"966ff25f21c7323c1f8b59634614e455ce12f0736afe51edd542f2bc4738e31e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["966ff25f21c7323c1f8b59634614e455ce12f0736afe51edd542f2bc4738e31e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"966ff25f21c7323c1f8b59634614e455ce12f0736afe51edd542f2bc4738e31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56179ded81d56fea62f350cc1c8f73ee4b21113370722fa0560b2f9110738724","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/966ff25f21c7323c1f8b59634614e455ce12f0736afe51edd542f2bc4738e31e"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"966ff25f21c7323c1f8b59634614e455ce12f0736afe51edd542f2bc4738e31e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T17:10:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-21T17:10:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1"} {"level":"info","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57718","PortSpecifier":{"PortValue":57718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57718","PortSpecifier":{"PortValue":57718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653836,"nanos":866809535},"http":{"id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"078a409e-6f5d-4ac3-ac5e-398cd6f317fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46392","PortSpecifier":{"PortValue":46392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46392","PortSpecifier":{"PortValue":46392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653836,"nanos":915305243},"http":{"id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/rate-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8fe7f2-3e29-460d-80d9-13b823bcda68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57722","PortSpecifier":{"PortValue":57722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57722","PortSpecifier":{"PortValue":57722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653836,"nanos":964962898},"http":{"id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR\"}"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","subscription":"e2e-rate-iso-a-c3aa5f","tenant":"e2e-shared-a-07bb43","userId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-c3aa5f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3aa5f"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","selected_subscription":"e2e-rate-iso-a-c3aa5f","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-c3aa5f@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d9c4ed2-d8b0-4bf6-b78a-9d69e18105b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57738","PortSpecifier":{"PortValue":57738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66254dec-bc0f-48c4-a120-6205cfffba0e","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57738","PortSpecifier":{"PortValue":57738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653838,"nanos":23990280},"http":{"id":"66254dec-bc0f-48c4-a120-6205cfffba0e","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR"} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR\"}"} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","subscription":"e2e-rate-iso-a-c3aa5f","tenant":"e2e-shared-a-07bb43","userId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-c3aa5f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3aa5f"} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","selected_subscription":"e2e-rate-iso-a-c3aa5f","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-c3aa5f@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66254dec-bc0f-48c4-a120-6205cfffba0e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57748","PortSpecifier":{"PortValue":57748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b666a280-48d9-4287-9ee6-0bc2b7001009","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57748","PortSpecifier":{"PortValue":57748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653839,"nanos":64338562},"http":{"id":"b666a280-48d9-4287-9ee6-0bc2b7001009","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR"} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR\"}"} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","subscription":"e2e-rate-iso-a-c3aa5f","tenant":"e2e-shared-a-07bb43","userId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-c3aa5f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3aa5f"} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","selected_subscription":"e2e-rate-iso-a-c3aa5f","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-c3aa5f@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b666a280-48d9-4287-9ee6-0bc2b7001009","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57752","PortSpecifier":{"PortValue":57752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57752","PortSpecifier":{"PortValue":57752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653840,"nanos":101274258},"http":{"id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR"} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR\"}"} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","subscription":"e2e-rate-iso-a-c3aa5f","tenant":"e2e-shared-a-07bb43","userId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-c3aa5f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3aa5f"} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","selected_subscription":"e2e-rate-iso-a-c3aa5f","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-c3aa5f@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70692ae8-1c6e-4fd6-bb62-0b15f73c87fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57764","PortSpecifier":{"PortValue":57764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57764","PortSpecifier":{"PortValue":57764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653841,"nanos":138067952},"http":{"id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR"} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR\"}"} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","subscription":"e2e-rate-iso-a-c3aa5f","tenant":"e2e-shared-a-07bb43","userId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-c3aa5f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3aa5f"} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","selected_subscription":"e2e-rate-iso-a-c3aa5f","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-c3aa5f@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a848f31d-cc4e-4251-a0fb-92d971e9de71","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57776","PortSpecifier":{"PortValue":57776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c175c9e-441f-4450-8521-05c96f0df46e","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57776","PortSpecifier":{"PortValue":57776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653842,"nanos":173571400},"http":{"id":"8c175c9e-441f-4450-8521-05c96f0df46e","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR"} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR\"}"} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","subscription":"e2e-rate-iso-a-c3aa5f","tenant":"e2e-shared-a-07bb43","userId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-c3aa5f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3aa5f"} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","selected_subscription":"e2e-rate-iso-a-c3aa5f","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-c3aa5f@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c175c9e-441f-4450-8521-05c96f0df46e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57782","PortSpecifier":{"PortValue":57782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a785c596-ae8f-450b-98af-6e0cf21bb601","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57782","PortSpecifier":{"PortValue":57782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653843,"nanos":209285339},"http":{"id":"a785c596-ae8f-450b-98af-6e0cf21bb601","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR"} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR\"}"} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","subscription":"e2e-rate-iso-a-c3aa5f","tenant":"e2e-shared-a-07bb43","userId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-c3aa5f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3aa5f"} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","selected_subscription":"e2e-rate-iso-a-c3aa5f","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-c3aa5f@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a785c596-ae8f-450b-98af-6e0cf21bb601","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57792","PortSpecifier":{"PortValue":57792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57792","PortSpecifier":{"PortValue":57792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653844,"nanos":242568527},"http":{"id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR"} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JQ0RMcQUNZZ1x6cj_aP2CftZUvIvKruVtQTeAoFVjzddoTbgwwfHOIMjGkYR\"}"} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","subscription":"e2e-rate-iso-a-c3aa5f","tenant":"e2e-shared-a-07bb43","userId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-c3aa5f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c3aa5f"} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a55f8b41-f04e-4676-ac56-7894a31a7bd3","keyName":"e2e-rate-a-c3aa5f","selected_subscription":"e2e-rate-iso-a-c3aa5f","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-c3aa5f@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c3aa5f","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4ca209-b46b-40e0-ac25-5f54e46326a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55840","PortSpecifier":{"PortValue":55840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55840","PortSpecifier":{"PortValue":55840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653852,"nanos":950336937},"http":{"id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b369dcb4-7ee5-484b-9ec0-9f6298d48fe6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51752","PortSpecifier":{"PortValue":51752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51752","PortSpecifier":{"PortValue":51752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653852,"nanos":989305264},"http":{"id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"]}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e9605353724c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=790cce3c-73c8-419d-8c05-2438d5a80b42"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d2b7ecff-b2eb-4daa-97e5-fd92c6573866","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/rate-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02e69eae-4cb0-4539-a9f1-2666c0d8fb25","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55852","PortSpecifier":{"PortValue":55852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55852","PortSpecifier":{"PortValue":55852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653853,"nanos":18919358},"http":{"id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EhQ4ekt2skmqXPhh_rbi8FSfQRhy0pCFZx9xnAHJACKB0bqYoNvOpFXxSnja"} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EhQ4ekt2skmqXPhh_rbi8FSfQRhy0pCFZx9xnAHJACKB0bqYoNvOpFXxSnja\"}"} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d60ac897-b803-44ba-bec5-7e017322e3d8","keyName":"e2e-rate-a-7be439","subscription":"e2e-rate-iso-a-7be439","tenant":"e2e-shared-a-07bb43","userId":"d60ac897-b803-44ba-bec5-7e017322e3d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-7be439\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7be439","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7be439"} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d60ac897-b803-44ba-bec5-7e017322e3d8","keyName":"e2e-rate-a-7be439","selected_subscription":"e2e-rate-iso-a-7be439","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-7be439@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7be439","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e2d6c1b-7b78-4c0d-b8bc-9594992a9d2b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55858","PortSpecifier":{"PortValue":55858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55858","PortSpecifier":{"PortValue":55858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653854,"nanos":53570877},"http":{"id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EhQ4ekt2skmqXPhh_rbi8FSfQRhy0pCFZx9xnAHJACKB0bqYoNvOpFXxSnja"} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EhQ4ekt2skmqXPhh_rbi8FSfQRhy0pCFZx9xnAHJACKB0bqYoNvOpFXxSnja\"}"} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d60ac897-b803-44ba-bec5-7e017322e3d8","keyName":"e2e-rate-a-7be439","subscription":"e2e-rate-iso-a-7be439","tenant":"e2e-shared-a-07bb43","userId":"d60ac897-b803-44ba-bec5-7e017322e3d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-7be439\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7be439","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7be439"} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d60ac897-b803-44ba-bec5-7e017322e3d8","keyName":"e2e-rate-a-7be439","selected_subscription":"e2e-rate-iso-a-7be439","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-7be439@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7be439","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70a1cf68-4033-4d4c-9fa5-75f78c5f84f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55864","PortSpecifier":{"PortValue":55864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","method":"POST","path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions","host":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55864","PortSpecifier":{"PortValue":55864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653855,"nanos":88541401},"http":{"id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","method":"POST","headers":{":authority":"e2e-shared-a-07bb43.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EhQ4ekt2skmqXPhh_rbi8FSfQRhy0pCFZx9xnAHJACKB0bqYoNvOpFXxSnja"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EhQ4ekt2skmqXPhh_rbi8FSfQRhy0pCFZx9xnAHJACKB0bqYoNvOpFXxSnja\"}"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d60ac897-b803-44ba-bec5-7e017322e3d8","keyName":"e2e-rate-a-7be439","subscription":"e2e-rate-iso-a-7be439","tenant":"e2e-shared-a-07bb43","userId":"d60ac897-b803-44ba-bec5-7e017322e3d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\",\"requestedSubscription\":\"e2e-rate-iso-a-7be439\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-07bb43.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7be439","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-07bb43/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7be439"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d60ac897-b803-44ba-bec5-7e017322e3d8","keyName":"e2e-rate-a-7be439","selected_subscription":"e2e-rate-iso-a-7be439","selected_subscription_key":"ai-tenant-e2e-shared-a-07bb43/e2e-rate-iso-a-7be439@ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07bb43","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7be439","namespace":"ai-tenant-e2e-shared-a-07bb43","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-07bb43/rate-test-model-07bb43"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ecb95a4-22c2-4f8e-82ba-5f568e62a5a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51768","PortSpecifier":{"PortValue":51768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8838791f-fccd-4178-a76c-c85abb44e24a","method":"POST","path":"/ai-tenant-e2e-shared-b-1e5534/rate-test-model-1e5534/v1/completions","host":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51768","PortSpecifier":{"PortValue":51768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784653855,"nanos":121156367},"http":{"id":"8838791f-fccd-4178-a76c-c85abb44e24a","method":"POST","headers":{":authority":"e2e-shared-b-1e5534.apps.71bcd21a-80d9-4037-9793-e9605353724c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1e5534/rate-test-model-1e5534/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SgMQdvdljXfNCtQ9_4fZYTvL04NTTQNHayQGiAwz9hJ3vvMCeSria4lWQSWe"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1e5534.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SgMQdvdljXfNCtQ9_4fZYTvL04NTTQNHayQGiAwz9hJ3vvMCeSria4lWQSWe\"}"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e5534.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"51698300-4f5f-4fb2-8322-e7f6f0593774","keyName":"e2e-rate-b-7be439","subscription":"e2e-rate-iso-b-7be439","tenant":"e2e-shared-b-1e5534","userId":"51698300-4f5f-4fb2-8322-e7f6f0593774","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1e5534.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1e5534/rate-test-model-1e5534\",\"requestedSubscription\":\"e2e-rate-iso-b-7be439\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1e5534.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1e5534","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7be439","namespace":"ai-tenant-e2e-shared-b-1e5534","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1e5534/rate-test-model-1e5534"}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1e5534/rate-test-model-1e5534\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1e5534/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7be439"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"51698300-4f5f-4fb2-8322-e7f6f0593774","keyName":"e2e-rate-b-7be439","selected_subscription":"e2e-rate-iso-b-7be439","selected_subscription_key":"ai-tenant-e2e-shared-b-1e5534/e2e-rate-iso-b-7be439@ai-tenant-e2e-shared-b-1e5534/rate-test-model-1e5534","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1e5534","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7be439","namespace":"ai-tenant-e2e-shared-b-1e5534","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1e5534/rate-test-model-1e5534"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-21T17:10:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8838791f-fccd-4178-a76c-c85abb44e24a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-21T17:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed704933b81aa863eb83a276ac548ac59a4518c74eb31397d5a6166da90c4fe8"} {"level":"info","ts":"2026-07-21T17:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf80bbdd91771ed91c3a24f93fb4640547a47855a9edce800136a7a09fc89c9"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/932521c0ef24457e8da817ce1545bf926406c47e5e4930736d06a9a1dc8fb723"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebf71e84a353bc9cf2c77da0fb77a780e2a3560248a7a775407322570614cd6f"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367098d736fd9cf4997ca19ec20402e9c9c2dd502008fd5d0ad92e6b89025bad"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80cde54f2a9f36a8ea5f51be872b13f10197b86f7e3d704d49840003cbc75e33"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7399ff11db02741474cfd79f097a703d3ea556be39f459402809b6f08d23cf5"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05435dd270f16ed6896726e58fb410f2942a46664539275df1a289b10c609c6a"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0c50dcd2a1d296af2d95218a4fde758a90002912b2c870314d7f3001551a2c2"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01ba4ea94aaac1c5884c1c5c77e7036655e7fff4021346e273930c2a6c91df3e"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837658c9238dadac2ecc8b39ac308ab8ce0f4d32ca37458146ea503683d525c6"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a294fdfc6a3c3869b96d064a6eff16c0b409c0b1087226224e351a5508bdb978"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a2a9f2f5458e2cdc5974ced864933b1ef2fccbfb4cc645c1dca6f5fc3fa0957"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56179ded81d56fea62f350cc1c8f73ee4b21113370722fa0560b2f9110738724"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5020732b6ee9aa27a8a5ef448742678fc82acd77b581fc7b69292e31d9bad26c"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f412682f124d2fdf48c080503cf32c891cdbf7373a625a4b6773c7ec12ff3f33"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83895478821f18110f9f049dd56c8c7fbaa40e380896b6751fec661d7d80ba66"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8503d80bc3beb6a37125ccbfd50934821ba323ad7b3b84c29c2b35e860657ad1"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14d2ea5722ad34833030522fceebe1d7d713e7b8f6fe1634e3d6c3cab16e916a"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/749f35920c7c94bb88def1e821ad6be0ad865287573414f14cd69b40c9d7db83"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/966ff25f21c7323c1f8b59634614e455ce12f0736afe51edd542f2bc4738e31e"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df553bd9a3b543506d544b5a3d5da918ad0bcab98f43df47cd6dc2dc59fb3b71"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7010b93d0329bc41af5e1b4a868b6772e3e7b6c6ad589519f8228cfcb55cecf6"} {"level":"info","ts":"2026-07-21T17:11:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef3bbdc1a0a6953d7b9cdf41a4e94dbc56af07f3b9d12b1d9c0a4cd72c44ea3d"}