--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f"} {"level":"info","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49424","PortSpecifier":{"PortValue":49424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49424","PortSpecifier":{"PortValue":49424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092156,"nanos":689179134},"http":{"id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/auth-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e11a61f4-9190-4ae0-a1fb-2be78b5c04c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49906","PortSpecifier":{"PortValue":49906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3b17f59-383f-42b0-a008-19a05b506dd5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49906","PortSpecifier":{"PortValue":49906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092156,"nanos":727356663},"http":{"id":"b3b17f59-383f-42b0-a008-19a05b506dd5","method":"POST","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/auth-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3b17f59-383f-42b0-a008-19a05b506dd5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49916","PortSpecifier":{"PortValue":49916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"333fd520-9cc7-4536-84cd-a59cedcafd53","method":"GET","path":"/maas-api/v1/api-keys/0803e2ea-d9de-444f-83f1-696b63e5403e","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49916","PortSpecifier":{"PortValue":49916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092156,"nanos":768254970},"http":{"id":"333fd520-9cc7-4536-84cd-a59cedcafd53","method":"GET","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0803e2ea-d9de-444f-83f1-696b63e5403e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0803e2ea-d9de-444f-83f1-696b63e5403e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/auth-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"333fd520-9cc7-4536-84cd-a59cedcafd53","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49434","PortSpecifier":{"PortValue":49434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5439105b-33d1-4413-a4df-d28fd5cda73f","method":"GET","path":"/maas-api/v1/api-keys/0803e2ea-d9de-444f-83f1-696b63e5403e","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49434","PortSpecifier":{"PortValue":49434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092156,"nanos":798919233},"http":{"id":"5439105b-33d1-4413-a4df-d28fd5cda73f","method":"GET","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0803e2ea-d9de-444f-83f1-696b63e5403e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0803e2ea-d9de-444f-83f1-696b63e5403e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/auth-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5439105b-33d1-4413-a4df-d28fd5cda73f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a"} {"level":"info","ts":"2026-07-26T18:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"info","ts":"2026-07-26T18:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b"} {"level":"info","ts":"2026-07-26T18:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719"} {"level":"info","ts":"2026-07-26T18:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f"} {"level":"info","ts":"2026-07-26T18:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d"} {"level":"info","ts":"2026-07-26T18:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286"} {"level":"info","ts":"2026-07-26T18:56:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:56:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d"} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d"} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d"} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b"} {"level":"info","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f"} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f"} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286"} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286"} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286"} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a"} {"level":"error","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"} {"level":"info","ts":"2026-07-26T18:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52992","PortSpecifier":{"PortValue":52992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52992","PortSpecifier":{"PortValue":52992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092199,"nanos":646466021},"http":{"id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/auth-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f02b7a42-5e31-4433-bfa8-f5f9ebaf21a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33664","PortSpecifier":{"PortValue":33664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f78d87fc-5004-496b-a52d-b1c957b00777","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33664","PortSpecifier":{"PortValue":33664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092199,"nanos":684333832},"http":{"id":"f78d87fc-5004-496b-a52d-b1c957b00777","method":"POST","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/auth-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f78d87fc-5004-496b-a52d-b1c957b00777","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52998","PortSpecifier":{"PortValue":52998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52998","PortSpecifier":{"PortValue":52998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092199,"nanos":721628030},"http":{"id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SjdZJVPsoIrJRijs_pbZO1u7QFUkwWsqPARbkZArkG481f1LQ5TXMacL4PaG"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SjdZJVPsoIrJRijs_pbZO1u7QFUkwWsqPARbkZArkG481f1LQ5TXMacL4PaG\"}"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1085a9a1-3e74-4754-8164-d4d4694c5d95","keyName":"e2e-auth-iso-a-47f4fb","subscription":"e2e-auth-iso-29ba2e","tenant":"e2e-shared-a-2b193e","userId":"1085a9a1-3e74-4754-8164-d4d4694c5d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/auth-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-29ba2e"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b37c8c3-4510-46fe-bc5d-a8f9d76eb7cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92b8d45b2aa74a91cccdda9ed41a55859448d25c53d826b7965fd136bcc81a3b"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ddec97e31ab24ed4bc11db478172e97fe8507a84dede3f5bdf2753b7b7aaebf"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0afe4cb67f244e8010386a89fe7901f13833ce4f955203e6c731b26af672f28d"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9c184e3f862e2f8202a6e6ff26d752723164564bf018d96c55f3536ffcc7e2"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618a95d2a740b16d00986ad093da2dd4cdd4bba833c4558b0237d6f6142afc90"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed05ede1effb17e84b1373c36e344995f753c977f5376a1583e65604c29caf25"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dfa3b2e7832d4414c3dbcfdbcac393e3929cd3e926dc741b1859083f2e08719"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f97f5377e600f1f8675644458611e1efe6c3ba7da830d61e481b8e24f31f95d2"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f32fe8aed5e8bb03fa5c1aef019e74e14b4bb64287d551deb989a2058195abf6"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb3c550e9c3006ec92c0593c32e84c4d3d3093ac35a23922ba0a7315cfd0c59b"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a993b558c0fd9ebaab856befad90ca540293ae5c9a44d6ae3cc4b5428162114f"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90c530d216c009d8c02b97e2f18e06d7fa832e7e1c06877972a9dfbd0ce36286"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70d5a6f08267a52fda575f248af60e3ef84383c16b5c0fd8306e37cc7ea32b32"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2528ba99583ea8e1315a5e048479693a23f5d3d83c99d255ade68af35adfe3b"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11e46fd84f6b12aa9e894096eccd040c2d1035461efc9ccbefd43f78db3b2c0a"} {"level":"info","ts":"2026-07-26T18:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44053330d4908b2396dfe094ebbaa8524e78a62982c5f56d4c81751dfdc8eeb7"} {"level":"debug","ts":"2026-07-26T18:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"debug","ts":"2026-07-26T18:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"} {"level":"error","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"} {"level":"debug","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"error","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309"} {"level":"info","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"error","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0524c5ce-efea-491f-b953-e254556fdfda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49588","PortSpecifier":{"PortValue":49588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0524c5ce-efea-491f-b953-e254556fdfda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0524c5ce-efea-491f-b953-e254556fdfda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49588","PortSpecifier":{"PortValue":49588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092263,"nanos":356130865},"http":{"id":"0524c5ce-efea-491f-b953-e254556fdfda","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0524c5ce-efea-491f-b953-e254556fdfda","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0524c5ce-efea-491f-b953-e254556fdfda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0524c5ce-efea-491f-b953-e254556fdfda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0524c5ce-efea-491f-b953-e254556fdfda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0524c5ce-efea-491f-b953-e254556fdfda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0524c5ce-efea-491f-b953-e254556fdfda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/sub-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0524c5ce-efea-491f-b953-e254556fdfda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0524c5ce-efea-491f-b953-e254556fdfda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0524c5ce-efea-491f-b953-e254556fdfda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0524c5ce-efea-491f-b953-e254556fdfda","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0524c5ce-efea-491f-b953-e254556fdfda","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48386","PortSpecifier":{"PortValue":48386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"590ebe28-c80c-4278-9cf2-d99eda556674","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48386","PortSpecifier":{"PortValue":48386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092263,"nanos":396326354},"http":{"id":"590ebe28-c80c-4278-9cf2-d99eda556674","method":"POST","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/sub-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"590ebe28-c80c-4278-9cf2-d99eda556674","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49594","PortSpecifier":{"PortValue":49594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49594","PortSpecifier":{"PortValue":49594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092263,"nanos":433707865},"http":{"id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","method":"GET","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qupcXx4HT9GvtYW9_xLjd0BboxGMvtABuvgCMFIj2qzJqzTKJSEJD4RgEImo"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qupcXx4HT9GvtYW9_xLjd0BboxGMvtABuvgCMFIj2qzJqzTKJSEJD4RgEImo\"}"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba8ae27e-65d5-4c95-9510-1e2459e8c9ad","keyName":"e2e-sub-iso-0ade1e","subscription":"e2e-a-only-fb73c8","tenant":"e2e-shared-a-2b193e","userId":"ba8ae27e-65d5-4c95-9510-1e2459e8c9ad","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/sub-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-fb73c8"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e27e8dc-db2b-457c-805a-2ef560c64d9d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48396","PortSpecifier":{"PortValue":48396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48396","PortSpecifier":{"PortValue":48396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092263,"nanos":472686095},"http":{"id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","method":"GET","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OH9HAkKokWo81eYc_gfohaulZ0UeCnIjlVc3g0wIrCOvqgwgxplN4x5JSbdq"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OH9HAkKokWo81eYc_gfohaulZ0UeCnIjlVc3g0wIrCOvqgwgxplN4x5JSbdq\"}"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d019f765-319b-4cb3-a2c7-2c93245184e1","keyName":"e2e-sub-iso-315dda","subscription":"e2e-b-only-fb73c8","tenant":"e2e-shared-b-c75d5a","userId":"d019f765-319b-4cb3-a2c7-2c93245184e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/sub-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-fb73c8"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:57:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b395d39a-f7f6-4639-bf5b-d1f76791f97e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"} {"level":"info","ts":"2026-07-26T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"} {"level":"info","ts":"2026-07-26T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"debug","ts":"2026-07-26T18:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:57:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41766","PortSpecifier":{"PortValue":41766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41766","PortSpecifier":{"PortValue":41766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092296,"nanos":196503505},"http":{"id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/sub-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a65fac8-a74e-41bb-8ccc-10e0fa4c043e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32890","PortSpecifier":{"PortValue":32890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32890","PortSpecifier":{"PortValue":32890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092296,"nanos":251736956},"http":{"id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","method":"POST","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/sub-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51d9fc51-30af-4c8c-aa7b-af248ef6d2c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41772","PortSpecifier":{"PortValue":41772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be170ec7-1f9f-4c47-852f-9673e8817413","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41772","PortSpecifier":{"PortValue":41772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092296,"nanos":296455556},"http":{"id":"be170ec7-1f9f-4c47-852f-9673e8817413","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t5AbGLfbX5PnA9V_3RwWQenXym3hozpoq97jnA8eXYb8oMTcqpSP40ML58w"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t5AbGLfbX5PnA9V_3RwWQenXym3hozpoq97jnA8eXYb8oMTcqpSP40ML58w\"}"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e2946be9-6eb5-4fb7-a9d8-0044757bd0d6","keyName":"e2e-sub-iso-31a798","subscription":"e2e-shared-sub-6f8d91","tenant":"e2e-shared-a-2b193e","userId":"e2946be9-6eb5-4fb7-a9d8-0044757bd0d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/sub-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6f8d91"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be170ec7-1f9f-4c47-852f-9673e8817413","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32894","PortSpecifier":{"PortValue":32894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32894","PortSpecifier":{"PortValue":32894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092296,"nanos":324628548},"http":{"id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","method":"POST","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WzhsKHUdrTsMYps1_sSLEaqECxjYxPvVN9Nk1RWD2HYEzd5bhdBIFlB5m7uZ"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WzhsKHUdrTsMYps1_sSLEaqECxjYxPvVN9Nk1RWD2HYEzd5bhdBIFlB5m7uZ\"}"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"48995492-3c2f-4a4f-b397-437f53bbc01b","keyName":"e2e-sub-iso-d66dbc","subscription":"e2e-shared-sub-6f8d91","tenant":"e2e-shared-b-c75d5a","userId":"48995492-3c2f-4a4f-b397-437f53bbc01b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/sub-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6f8d91"} {"level":"info","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b86b0a78-07a9-4460-bc24-c3ab662a7d29","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba84ecea8837c9649e79099205c84897d0b52fd1f6cfe55db73625487824bd1d"} {"level":"info","ts":"2026-07-26T18:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb93005a3d3d920731ed1769c369ac6042d278d7088fac1c42c51a74fe5a26c"} {"level":"info","ts":"2026-07-26T18:58:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6552c04f45639be94f7e3747ae8a52ebf0fc5928a27a98d2ee28b943a79dd4a"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/810a64332d6532b52312d796e7053e5a85382051ed207f989a0f65bc48aaf72e"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9247c9c61a07eeaaf6b41950ea928c463aeec23dcf769244143775768c7ca96"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52ca3ad0178f25bf8a0467a6810987256f83e91f7f6c238122068b3b81850a04"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/636c63c38c1a5450711a7246ee5c36b04a02b09d10b77b6ebe6c7170ae537731"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6169a56794d4fceb3112fdd0bd1ea43234459b2b6f9d8817998165eb0ef9a309"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee04dedb798289809676f6a2ecee2819ad16ed4ae953edb8a580c49eea1c5ea1"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bbbc01b1f0137054dff24e312a6b8ad980ed1f71c548cb9c42f18ff3b54c1e7"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36a9a5532ab212866cbc89c8f7de9880cce97ffbd8483405d6f3d2dcff0a3e8c"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f52814869bb96da64b4b87484e85335c5dcb34a3d55a607e4b0e19b3ed15804a"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69f48510cca861e333c34ccda9babec96fba915f877cb134a088b4d7328ba9b9"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/702525fd0c2a1846bc4605498dc85cb1efdf37886a6ef4d1fd89bac50c3ba234"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e1d666416fb2ee926b1cc2f20716359b5ff6f3680bd172513a8007674970c8e"} {"level":"info","ts":"2026-07-26T18:58:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbd814e45cf4cfd0d93759e829f2e324d7a642244e05e91c6386f6bbaf7efc18"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607"} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200"} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8"} {"level":"info","ts":"2026-07-26T18:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34cb6d89459c061949b0f53fc8a312a308feb9e0c372a4e657d0259d0437cdac"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0e734c5af8cd826a97740cc45838d64c28b92f82daf4d830be13ca052bd474"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a12cffbad35950603b75c5e17d80d54bde6593909e31d5c17b02216dca3c27"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34cb6d89459c061949b0f53fc8a312a308feb9e0c372a4e657d0259d0437cdac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34cb6d89459c061949b0f53fc8a312a308feb9e0c372a4e657d0259d0437cdac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34cb6d89459c061949b0f53fc8a312a308feb9e0c372a4e657d0259d0437cdac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0e734c5af8cd826a97740cc45838d64c28b92f82daf4d830be13ca052bd474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0e734c5af8cd826a97740cc45838d64c28b92f82daf4d830be13ca052bd474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34cb6d89459c061949b0f53fc8a312a308feb9e0c372a4e657d0259d0437cdac"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0e734c5af8cd826a97740cc45838d64c28b92f82daf4d830be13ca052bd474","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0e734c5af8cd826a97740cc45838d64c28b92f82daf4d830be13ca052bd474"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a12cffbad35950603b75c5e17d80d54bde6593909e31d5c17b02216dca3c27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a12cffbad35950603b75c5e17d80d54bde6593909e31d5c17b02216dca3c27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a12cffbad35950603b75c5e17d80d54bde6593909e31d5c17b02216dca3c27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a12cffbad35950603b75c5e17d80d54bde6593909e31d5c17b02216dca3c27"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T18:59:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34cb6d89459c061949b0f53fc8a312a308feb9e0c372a4e657d0259d0437cdac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0e734c5af8cd826a97740cc45838d64c28b92f82daf4d830be13ca052bd474","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a12cffbad35950603b75c5e17d80d54bde6593909e31d5c17b02216dca3c27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T18:59:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59"} {"level":"info","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32984","PortSpecifier":{"PortValue":32984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82a1dda4-0904-4d16-bcbc-21dae376893f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32984","PortSpecifier":{"PortValue":32984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092380,"nanos":94507014},"http":{"id":"82a1dda4-0904-4d16-bcbc-21dae376893f","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82a1dda4-0904-4d16-bcbc-21dae376893f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f641d614-60e5-403a-a55d-03c963a0386b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40910","PortSpecifier":{"PortValue":40910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f641d614-60e5-403a-a55d-03c963a0386b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f641d614-60e5-403a-a55d-03c963a0386b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40910","PortSpecifier":{"PortValue":40910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092380,"nanos":133492503},"http":{"id":"f641d614-60e5-403a-a55d-03c963a0386b","method":"POST","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f641d614-60e5-403a-a55d-03c963a0386b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f641d614-60e5-403a-a55d-03c963a0386b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f641d614-60e5-403a-a55d-03c963a0386b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f641d614-60e5-403a-a55d-03c963a0386b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f641d614-60e5-403a-a55d-03c963a0386b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f641d614-60e5-403a-a55d-03c963a0386b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f641d614-60e5-403a-a55d-03c963a0386b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f641d614-60e5-403a-a55d-03c963a0386b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f641d614-60e5-403a-a55d-03c963a0386b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f641d614-60e5-403a-a55d-03c963a0386b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f641d614-60e5-403a-a55d-03c963a0386b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33000","PortSpecifier":{"PortValue":33000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33000","PortSpecifier":{"PortValue":33000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092380,"nanos":169661464},"http":{"id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ai2j7SWPSkCCm9L4_q8kCXsp95GJEtwGkeJUodgnUPYtVhTWdSDvrZ06Ro84"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ai2j7SWPSkCCm9L4_q8kCXsp95GJEtwGkeJUodgnUPYtVhTWdSDvrZ06Ro84\"}"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18186e76-fbe1-4344-92f2-ce38be592dba","keyName":"e2e-rate-a-a0c8d1","subscription":"e2e-rate-iso-a-a0c8d1","tenant":"e2e-shared-a-2b193e","userId":"18186e76-fbe1-4344-92f2-ce38be592dba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-a0c8d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0c8d1","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0c8d1"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"18186e76-fbe1-4344-92f2-ce38be592dba","keyName":"e2e-rate-a-a0c8d1","selected_subscription":"e2e-rate-iso-a-a0c8d1","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-a0c8d1@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0c8d1","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:59:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b30e1a0-ca8a-4987-8dca-a68a176c85b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a484893e-de38-4cf0-826e-a73098e13359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33002","PortSpecifier":{"PortValue":33002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a484893e-de38-4cf0-826e-a73098e13359","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a484893e-de38-4cf0-826e-a73098e13359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33002","PortSpecifier":{"PortValue":33002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092381,"nanos":284924193},"http":{"id":"a484893e-de38-4cf0-826e-a73098e13359","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ai2j7SWPSkCCm9L4_q8kCXsp95GJEtwGkeJUodgnUPYtVhTWdSDvrZ06Ro84"} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ai2j7SWPSkCCm9L4_q8kCXsp95GJEtwGkeJUodgnUPYtVhTWdSDvrZ06Ro84\"}"} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18186e76-fbe1-4344-92f2-ce38be592dba","keyName":"e2e-rate-a-a0c8d1","subscription":"e2e-rate-iso-a-a0c8d1","tenant":"e2e-shared-a-2b193e","userId":"18186e76-fbe1-4344-92f2-ce38be592dba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-a0c8d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0c8d1","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a484893e-de38-4cf0-826e-a73098e13359","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0c8d1"} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a484893e-de38-4cf0-826e-a73098e13359","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"18186e76-fbe1-4344-92f2-ce38be592dba","keyName":"e2e-rate-a-a0c8d1","selected_subscription":"e2e-rate-iso-a-a0c8d1","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-a0c8d1@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0c8d1","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a484893e-de38-4cf0-826e-a73098e13359","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:59:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a484893e-de38-4cf0-826e-a73098e13359","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33008","PortSpecifier":{"PortValue":33008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff65e292-29d4-4818-8d63-20159c9dbca0","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33008","PortSpecifier":{"PortValue":33008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092382,"nanos":322953857},"http":{"id":"ff65e292-29d4-4818-8d63-20159c9dbca0","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ai2j7SWPSkCCm9L4_q8kCXsp95GJEtwGkeJUodgnUPYtVhTWdSDvrZ06Ro84"} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ai2j7SWPSkCCm9L4_q8kCXsp95GJEtwGkeJUodgnUPYtVhTWdSDvrZ06Ro84\"}"} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18186e76-fbe1-4344-92f2-ce38be592dba","keyName":"e2e-rate-a-a0c8d1","subscription":"e2e-rate-iso-a-a0c8d1","tenant":"e2e-shared-a-2b193e","userId":"18186e76-fbe1-4344-92f2-ce38be592dba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-a0c8d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0c8d1","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0c8d1"} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"18186e76-fbe1-4344-92f2-ce38be592dba","keyName":"e2e-rate-a-a0c8d1","selected_subscription":"e2e-rate-iso-a-a0c8d1","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-a0c8d1@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0c8d1","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T18:59:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff65e292-29d4-4818-8d63-20159c9dbca0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39262","PortSpecifier":{"PortValue":39262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39262","PortSpecifier":{"PortValue":39262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092403,"nanos":476168304},"http":{"id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c864aae1-278d-4375-94ae-7ea7840f3d8a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71918d52-654a-4cad-ae6b-37837d57918a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39472","PortSpecifier":{"PortValue":39472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71918d52-654a-4cad-ae6b-37837d57918a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71918d52-654a-4cad-ae6b-37837d57918a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39472","PortSpecifier":{"PortValue":39472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092403,"nanos":510141253},"http":{"id":"71918d52-654a-4cad-ae6b-37837d57918a","method":"POST","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71918d52-654a-4cad-ae6b-37837d57918a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71918d52-654a-4cad-ae6b-37837d57918a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71918d52-654a-4cad-ae6b-37837d57918a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71918d52-654a-4cad-ae6b-37837d57918a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71918d52-654a-4cad-ae6b-37837d57918a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71918d52-654a-4cad-ae6b-37837d57918a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71918d52-654a-4cad-ae6b-37837d57918a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71918d52-654a-4cad-ae6b-37837d57918a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71918d52-654a-4cad-ae6b-37837d57918a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71918d52-654a-4cad-ae6b-37837d57918a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71918d52-654a-4cad-ae6b-37837d57918a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39272","PortSpecifier":{"PortValue":39272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39272","PortSpecifier":{"PortValue":39272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092403,"nanos":540568379},"http":{"id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:00:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eb4d8e7-514d-4261-b626-61dab6dc5832","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b733c659-6da3-4e1a-bed6-e64126216bc4","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092404,"nanos":579714300},"http":{"id":"b733c659-6da3-4e1a-bed6-e64126216bc4","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b733c659-6da3-4e1a-bed6-e64126216bc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28b064b3-a375-419e-8818-e9c452c0557d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39286","PortSpecifier":{"PortValue":39286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28b064b3-a375-419e-8818-e9c452c0557d","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28b064b3-a375-419e-8818-e9c452c0557d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39286","PortSpecifier":{"PortValue":39286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092405,"nanos":617885247},"http":{"id":"28b064b3-a375-419e-8818-e9c452c0557d","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28b064b3-a375-419e-8818-e9c452c0557d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28b064b3-a375-419e-8818-e9c452c0557d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28b064b3-a375-419e-8818-e9c452c0557d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28b064b3-a375-419e-8818-e9c452c0557d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39296","PortSpecifier":{"PortValue":39296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df25cd56-d381-4718-9b5d-830a72a43ad8","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39296","PortSpecifier":{"PortValue":39296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092406,"nanos":679684526},"http":{"id":"df25cd56-d381-4718-9b5d-830a72a43ad8","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df25cd56-d381-4718-9b5d-830a72a43ad8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39302","PortSpecifier":{"PortValue":39302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39302","PortSpecifier":{"PortValue":39302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092407,"nanos":715719681},"http":{"id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d90d34b-8806-4a92-b4ae-d6bb2ad7e7f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39314","PortSpecifier":{"PortValue":39314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","method":"POST","path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions","host":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39314","PortSpecifier":{"PortValue":39314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092408,"nanos":752673832},"http":{"id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","method":"POST","headers":{":authority":"e2e-shared-a-2b193e.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOgEOiHHjYxRNm56_R8MywvhfIl6rinQgdOPQhaG8lHc717HHOq2UBSK0nRu\"}"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","subscription":"e2e-rate-iso-a-aa71d8","tenant":"e2e-shared-a-2b193e","userId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\",\"requestedSubscription\":\"e2e-rate-iso-a-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2b193e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-aa71d8"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ba3ce2d-6435-466d-acc2-4069c4438d95","keyName":"e2e-rate-a-aa71d8","selected_subscription":"e2e-rate-iso-a-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-a-2b193e/e2e-rate-iso-a-aa71d8@ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2b193e/models/facebook/opt-125m","name":"rate-test-model-2b193e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-aa71d8","namespace":"ai-tenant-e2e-shared-a-2b193e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2b193e/rate-test-model-2b193e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37dd48f8-db93-4bb0-837c-7324308ce3f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39476","PortSpecifier":{"PortValue":39476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","method":"POST","path":"/ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a/v1/completions","host":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39476","PortSpecifier":{"PortValue":39476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092408,"nanos":788369202},"http":{"id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","method":"POST","headers":{":authority":"e2e-shared-b-c75d5a.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lfnKDwIKQKZGFpVI_E6ihaLM4HotwVlx4FRCQAGgSafBruMFeH0UAqv61ReS"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lfnKDwIKQKZGFpVI_E6ihaLM4HotwVlx4FRCQAGgSafBruMFeH0UAqv61ReS\"}"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d18de4ce-3ed2-4f72-b33f-b49e31128f05","keyName":"e2e-rate-b-aa71d8","subscription":"e2e-rate-iso-b-aa71d8","tenant":"e2e-shared-b-c75d5a","userId":"d18de4ce-3ed2-4f72-b33f-b49e31128f05","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a\",\"requestedSubscription\":\"e2e-rate-iso-b-aa71d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c75d5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m","name":"rate-test-model-c75d5a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-aa71d8","namespace":"ai-tenant-e2e-shared-b-c75d5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a"}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-aa71d8"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d18de4ce-3ed2-4f72-b33f-b49e31128f05","keyName":"e2e-rate-b-aa71d8","selected_subscription":"e2e-rate-iso-b-aa71d8","selected_subscription_key":"ai-tenant-e2e-shared-b-c75d5a/e2e-rate-iso-b-aa71d8@ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-c75d5a/models/facebook/opt-125m","name":"rate-test-model-c75d5a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-aa71d8","namespace":"ai-tenant-e2e-shared-b-c75d5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c75d5a/rate-test-model-c75d5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cb60677-ad9c-4f82-84bd-0bed0ed02ef5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f4b9561be2e585cdb1638e631b29ea3337fc6997a504dfbeb5048d75c1cf607"} {"level":"info","ts":"2026-07-26T19:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84d2013e1fbaf8825f61489811900149bbab9e45d921bf40827d653bf2eb78d9"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce98a2402d05b817f56e05c9c0feb375539577dd78629015d9755223563c0a20"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbd482974c9cb4e550b2ffab11e4efa109aa16482874e2006b7f83c762bb22c6"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51da417a78cd1151292df62c4f0747765ae65d071c84a48a04db091f8ef20ed"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae063b5ac4a412e38b0895b242ac88b0dada603c6dc7a1c820b75c45af5a4e59"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22c491c781880d675bbe6eb3b2d11a9b6c3cb1a00e39db1f78ae7de470deb200"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e934e5de316297c1a3afa0dc8d7bd2f3aab2902196456acf881ee01e516f93"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19ff353a1c10fa063ecfb66b902000c047bff791c9b8e6b4a9f88a44528149ca"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/534a19c1acb597ecb72b691ac8ecbfb5bd9d9cdee284b86f106a1cba3ed6165b"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fbbbb11b4da163512a5cceae92036d625011a27f7c846cadd0f02c40941a9af"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c0e734c5af8cd826a97740cc45838d64c28b92f82daf4d830be13ca052bd474"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0772d4d16aa9224037a0bac5c3241e8437c4eefc5c00fda967cbd182ffa851d"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecacc25fdcaf71ad98586d4e928d632f2449cbf26ced0613f8e3dc380856b165"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85c1cc26642d714da1212d7dd6a982e842903f4149961b6f4671e06eaeae2ab8"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c106e7fd1699d74ea83abfb37f3130d593fc07d4420d22a6facbb44acd5cc6a2"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2fba1574cd190a2107302dba5b6a4abba8f7dbc9478897b18c2dd0b3bb2793f"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34cb6d89459c061949b0f53fc8a312a308feb9e0c372a4e657d0259d0437cdac"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56c5ea56b166c236fb7e122b296dbd61501b38f65178636b17462b39f011eedd"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a12cffbad35950603b75c5e17d80d54bde6593909e31d5c17b02216dca3c27"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ee9202944064914eae4620c4693858f7df2712f0486351eafb659cd92b69e91"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da0b5135fa384cef707a0e38ad20a7eaa5e8daaf8aaa2729b7e932e2ea637ea8"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97014d7350bc702b9439e1998d7c48dd43e297ac3b21ffb405db01b2fb6f9e19"} {"level":"info","ts":"2026-07-26T19:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5c4d4bf60826a51753ce996160f74c4f9f5e089e132503283fbf812e456c4c"} {"level":"info","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52408","PortSpecifier":{"PortValue":52408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52408","PortSpecifier":{"PortValue":52408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092481,"nanos":951828961},"http":{"id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","method":"POST","headers":{":authority":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a52e7115-8282-4e1c-b9ea-0963e8bce514","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52420","PortSpecifier":{"PortValue":52420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52420","PortSpecifier":{"PortValue":52420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092481,"nanos":993414686},"http":{"id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","method":"POST","headers":{":authority":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EzV01Eh7pZRCa9v8_F5m1Az6UVYL1aoBYV4muGeMogjbu2PkCAnfnFkslqQ5"} {"level":"debug","ts":"2026-07-26T19:01:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EzV01Eh7pZRCa9v8_F5m1Az6UVYL1aoBYV4muGeMogjbu2PkCAnfnFkslqQ5\"}"} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"587dec44-316e-47c7-bdee-2cc264bf1f82","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"587dec44-316e-47c7-bdee-2cc264bf1f82","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"587dec44-316e-47c7-bdee-2cc264bf1f82","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"672bdf4d-85dd-4983-b04a-70e5dc9e7d0d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1"} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"} {"level":"debug","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T19:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T19:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"} {"level":"info","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33324","PortSpecifier":{"PortValue":33324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092526,"nanos":767587199},"http":{"id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","method":"POST","headers":{":authority":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"]}} {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/03c127e1eea5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=391b9740-2501-4884-99f6-4a01d327a0dc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"266972a0-e5a4-49ac-a1c5-5e96d6448089","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4735db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3dc77d0-5d26-4be5-abf1-f196166d0821","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33326","PortSpecifier":{"PortValue":33326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","method":"POST","path":"/ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db/v1/chat/completions","host":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33326","PortSpecifier":{"PortValue":33326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785092528,"nanos":836433039},"http":{"id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","method":"POST","headers":{":authority":"e2e-ipp-a-4735db.apps.99b4a935-90ed-42a2-a95d-03c127e1eea5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JdJyVmjIyfraE57k_mv3pg5CB3gqyYoJlTikqMwniojDiFq9tmaitWmmac2u"} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-4735db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JdJyVmjIyfraE57k_mv3pg5CB3gqyYoJlTikqMwniojDiFq9tmaitWmmac2u\"}"} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4735db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"22ed78f5-011b-4291-8bce-715abfc9715a","keyName":"e2e-ipp-4735db","subscription":"ipp-route-4735db-sub","tenant":"e2e-ipp-a-4735db","userId":"22ed78f5-011b-4291-8bce-715abfc9715a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-4735db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db\",\"requestedSubscription\":\"ipp-route-4735db-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-4735db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-4735db/models/facebook/opt-125m","name":"ipp-route-4735db","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4735db-sub","namespace":"ai-tenant-e2e-ipp-a-4735db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db"}} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-4735db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-4735db-sub"} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"22ed78f5-011b-4291-8bce-715abfc9715a","keyName":"e2e-ipp-4735db","selected_subscription":"ipp-route-4735db-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db-sub@ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-4735db/models/facebook/opt-125m","name":"ipp-route-4735db","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-4735db-sub","namespace":"ai-tenant-e2e-ipp-a-4735db","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-4735db/ipp-route-4735db"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T19:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b75545f-0562-44b5-871b-3c83e0dcb6b8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b571b47984eef1eff92d19d1199723826cccde56a8091441a1c53ea44b9655e"} {"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f379aad1db588cac7ed994f092cd86eed730e915f318e49b271e85dc69fc31b"} {"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/babbb092ae085db68ddac19118e8ee0cd065819a9217d58b28bb40087062f35d"} {"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36aa3d629b8660c13b7ca79bd46f4efcac62bffa360d01d80f42624159fd8116"} {"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b478f27d3d7ebb775e22ef9d5bc2966f586bdc76915d3adbf91c02d855ca268"} {"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5391ca678c2251607d1e2a345ee673b287ec63cd0be3d155884d36b4c1e86260"} {"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8186a2df8af8ec215a24b3a6c90f44548e2e3968f2a47c2a8e9f31723a4716c4"} {"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d980bcccf75a68c752743f65a5f3d75bb1a3071f58e55907b15b2de84c1c7366"} {"level":"info","ts":"2026-07-26T19:03:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a59ef62142627cc895b94a8eb250cdbb136619cf3d67803dc4e05e5dd1e210d1"} {"level":"info","ts":"2026-07-26T19:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/100b054b924776b92c3ee1cd0d2f41867a7b7757123823b375ffc287664a513e"} {"level":"info","ts":"2026-07-26T19:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f86d858921d356aa0e2cc8409772f6a1558274562d5d099dfecd6195dfeb95b"} {"level":"info","ts":"2026-07-26T19:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c75d58cf10b5a1488c9ca82be60952bb898cc7a19353df8ceb13a6912c68eb1f"}