--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd957d230894c4e375c061a908afa6ea1ca043f828f526f7e47b8f0a1455e679"} {"level":"info","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cae2a2b1bab580950102744ab7ce13b8489e1d4e624c055c75c0e32e3e13244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cae2a2b1bab580950102744ab7ce13b8489e1d4e624c055c75c0e32e3e13244"} {"level":"info","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd942b7edb8d854ba3d21ffb1937d54c918d8b66c4113b3cb57b21720275a734","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd957d230894c4e375c061a908afa6ea1ca043f828f526f7e47b8f0a1455e679","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cae2a2b1bab580950102744ab7ce13b8489e1d4e624c055c75c0e32e3e13244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6"} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec"} {"level":"debug","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec"} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec"} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de"} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8"} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:54:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de"} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"} {"level":"info","ts":"2026-07-16T12:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8"} {"level":"info","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aad84e1-1292-42e4-802c-13c33884a470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33462","PortSpecifier":{"PortValue":33462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8aad84e1-1292-42e4-802c-13c33884a470","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aad84e1-1292-42e4-802c-13c33884a470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33462","PortSpecifier":{"PortValue":33462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206472,"nanos":683689051},"http":{"id":"8aad84e1-1292-42e4-802c-13c33884a470","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8aad84e1-1292-42e4-802c-13c33884a470","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8aad84e1-1292-42e4-802c-13c33884a470","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8aad84e1-1292-42e4-802c-13c33884a470","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aad84e1-1292-42e4-802c-13c33884a470","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aad84e1-1292-42e4-802c-13c33884a470","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aad84e1-1292-42e4-802c-13c33884a470","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8aad84e1-1292-42e4-802c-13c33884a470","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aad84e1-1292-42e4-802c-13c33884a470","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aad84e1-1292-42e4-802c-13c33884a470","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aad84e1-1292-42e4-802c-13c33884a470","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aad84e1-1292-42e4-802c-13c33884a470","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42046","PortSpecifier":{"PortValue":42046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42046","PortSpecifier":{"PortValue":42046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206472,"nanos":745967615},"http":{"id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/auth-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4912dd0-6f6d-48cf-bda1-8aa3d7442477","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33478","PortSpecifier":{"PortValue":33478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","method":"GET","path":"/maas-api/v1/api-keys/2cbceba6-3fcc-4879-9877-ad6eef52f451","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33478","PortSpecifier":{"PortValue":33478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206472,"nanos":809609978},"http":{"id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","method":"GET","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2cbceba6-3fcc-4879-9877-ad6eef52f451",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2cbceba6-3fcc-4879-9877-ad6eef52f451",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90ae5747-6c7d-43f5-9294-3bc7aa10dad9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42056","PortSpecifier":{"PortValue":42056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","method":"GET","path":"/maas-api/v1/api-keys/c535528b-100e-4643-ba4e-d37c06e734e5","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42056","PortSpecifier":{"PortValue":42056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206472,"nanos":848786883},"http":{"id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","method":"GET","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c535528b-100e-4643-ba4e-d37c06e734e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c535528b-100e-4643-ba4e-d37c06e734e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/auth-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:54:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd46a068-d8cc-47ca-bcf9-46284fc6c8e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39012","PortSpecifier":{"PortValue":39012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e4652a3-febf-4d77-babf-2d5317bce550","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39012","PortSpecifier":{"PortValue":39012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206494,"nanos":260047381},"http":{"id":"1e4652a3-febf-4d77-babf-2d5317bce550","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e4652a3-febf-4d77-babf-2d5317bce550","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47196","PortSpecifier":{"PortValue":47196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47196","PortSpecifier":{"PortValue":47196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206494,"nanos":310574419},"http":{"id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/auth-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a151f4c-762e-4197-b2c6-3915f5d4fcc7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"683433eb-4597-401b-b594-2cc6c3a59520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39020","PortSpecifier":{"PortValue":39020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"683433eb-4597-401b-b594-2cc6c3a59520","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"683433eb-4597-401b-b594-2cc6c3a59520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39020","PortSpecifier":{"PortValue":39020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206494,"nanos":358697393},"http":{"id":"683433eb-4597-401b-b594-2cc6c3a59520","method":"GET","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lMtMkRAbn0fpZKEL_vvdeWCaU1cQfoadAsIno2KNwRXEKmoVMK7LnSkUHf3F"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lMtMkRAbn0fpZKEL_vvdeWCaU1cQfoadAsIno2KNwRXEKmoVMK7LnSkUHf3F\"}"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2482eadd-1e60-4050-8696-b6ea6076883a","keyName":"e2e-auth-iso-a-167150","subscription":"e2e-auth-iso-7b10c5","tenant":"e2e-shared-a-989150","userId":"2482eadd-1e60-4050-8696-b6ea6076883a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"683433eb-4597-401b-b594-2cc6c3a59520","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7b10c5"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"683433eb-4597-401b-b594-2cc6c3a59520","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"683433eb-4597-401b-b594-2cc6c3a59520","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"683433eb-4597-401b-b594-2cc6c3a59520","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46832","PortSpecifier":{"PortValue":46832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46832","PortSpecifier":{"PortValue":46832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206513,"nanos":636908432},"http":{"id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a606b05-0db9-4801-a313-ee2fedfda1ad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55204","PortSpecifier":{"PortValue":55204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"684da2e1-eba3-43b0-a239-b008efe98e4f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55204","PortSpecifier":{"PortValue":55204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206513,"nanos":676801163},"http":{"id":"684da2e1-eba3-43b0-a239-b008efe98e4f","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/auth-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"684da2e1-eba3-43b0-a239-b008efe98e4f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58432","PortSpecifier":{"PortValue":58432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58432","PortSpecifier":{"PortValue":58432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206513,"nanos":724923325},"http":{"id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","method":"GET","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xAmZWtrUCbiHi5os_E31guJSFzBHfjEvesLOL6Fn7t6VfUqF8DLJ8akGtikG"} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xAmZWtrUCbiHi5os_E31guJSFzBHfjEvesLOL6Fn7t6VfUqF8DLJ8akGtikG\"}"} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T12:55:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d921d7-05f0-4f60-889e-0bbb31af7e28","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60474","PortSpecifier":{"PortValue":60474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60474","PortSpecifier":{"PortValue":60474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206530,"nanos":871529973},"http":{"id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6994e94c-36c4-4be5-bccd-9205d64dabaa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af2379ec-95e0-464e-9442-c78f646d493d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54190","PortSpecifier":{"PortValue":54190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af2379ec-95e0-464e-9442-c78f646d493d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af2379ec-95e0-464e-9442-c78f646d493d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54190","PortSpecifier":{"PortValue":54190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206530,"nanos":912638432},"http":{"id":"af2379ec-95e0-464e-9442-c78f646d493d","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af2379ec-95e0-464e-9442-c78f646d493d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af2379ec-95e0-464e-9442-c78f646d493d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af2379ec-95e0-464e-9442-c78f646d493d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af2379ec-95e0-464e-9442-c78f646d493d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af2379ec-95e0-464e-9442-c78f646d493d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af2379ec-95e0-464e-9442-c78f646d493d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/auth-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af2379ec-95e0-464e-9442-c78f646d493d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af2379ec-95e0-464e-9442-c78f646d493d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af2379ec-95e0-464e-9442-c78f646d493d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af2379ec-95e0-464e-9442-c78f646d493d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af2379ec-95e0-464e-9442-c78f646d493d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206530,"nanos":953342384},"http":{"id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f7a7e7d-7d80-4efa-90ab-fb5254d84b77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54198","PortSpecifier":{"PortValue":54198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96da09ec-50a5-4d8c-863f-972c266fa26f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54198","PortSpecifier":{"PortValue":54198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206530,"nanos":992294802},"http":{"id":"96da09ec-50a5-4d8c-863f-972c266fa26f","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/auth-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:55:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:55:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96da09ec-50a5-4d8c-863f-972c266fa26f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45830","PortSpecifier":{"PortValue":45830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45830","PortSpecifier":{"PortValue":45830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206548,"nanos":170799526},"http":{"id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6840e37b-4bc4-4b63-b20a-5b3914a74ada","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38478","PortSpecifier":{"PortValue":38478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38478","PortSpecifier":{"PortValue":38478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206548,"nanos":210095045},"http":{"id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/auth-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18352e2b-ea37-4147-9dfc-afe1a44f78f5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38488","PortSpecifier":{"PortValue":38488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80d7c6d8-747c-4521-9df1-43f130d21603","method":"GET","path":"/maas-api/v1/api-keys/4d5c738a-0a26-42dc-b42f-131846a0062a","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38488","PortSpecifier":{"PortValue":38488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206548,"nanos":251801391},"http":{"id":"80d7c6d8-747c-4521-9df1-43f130d21603","method":"GET","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d5c738a-0a26-42dc-b42f-131846a0062a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d5c738a-0a26-42dc-b42f-131846a0062a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/auth-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80d7c6d8-747c-4521-9df1-43f130d21603","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45838","PortSpecifier":{"PortValue":45838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0026f7b5-c79a-4056-93f0-cc63904df512","method":"GET","path":"/maas-api/v1/api-keys/4d5c738a-0a26-42dc-b42f-131846a0062a","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45838","PortSpecifier":{"PortValue":45838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206548,"nanos":284258610},"http":{"id":"0026f7b5-c79a-4056-93f0-cc63904df512","method":"GET","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d5c738a-0a26-42dc-b42f-131846a0062a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4d5c738a-0a26-42dc-b42f-131846a0062a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0026f7b5-c79a-4056-93f0-cc63904df512","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b94df24f-233b-4df4-8f27-23f511267967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55156","PortSpecifier":{"PortValue":55156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b94df24f-233b-4df4-8f27-23f511267967","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b94df24f-233b-4df4-8f27-23f511267967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55156","PortSpecifier":{"PortValue":55156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206567,"nanos":613333914},"http":{"id":"b94df24f-233b-4df4-8f27-23f511267967","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b94df24f-233b-4df4-8f27-23f511267967","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b94df24f-233b-4df4-8f27-23f511267967","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b94df24f-233b-4df4-8f27-23f511267967","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94df24f-233b-4df4-8f27-23f511267967","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94df24f-233b-4df4-8f27-23f511267967","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94df24f-233b-4df4-8f27-23f511267967","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b94df24f-233b-4df4-8f27-23f511267967","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b94df24f-233b-4df4-8f27-23f511267967","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b94df24f-233b-4df4-8f27-23f511267967","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b94df24f-233b-4df4-8f27-23f511267967","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b94df24f-233b-4df4-8f27-23f511267967","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40476","PortSpecifier":{"PortValue":40476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40476","PortSpecifier":{"PortValue":40476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206567,"nanos":658258784},"http":{"id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/auth-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98ea84c4-2e21-4cee-acd1-e14fd9194b33","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55162","PortSpecifier":{"PortValue":55162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1332ed02-9d89-494b-abb2-21b0ace0829d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55162","PortSpecifier":{"PortValue":55162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206567,"nanos":701222373},"http":{"id":"1332ed02-9d89-494b-abb2-21b0ace0829d","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IFjLjFs8BcyxqYwi_JIdzDkkubALh7XCmZf02xYUa7PbYmubDOCfkN3WH14U"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IFjLjFs8BcyxqYwi_JIdzDkkubALh7XCmZf02xYUa7PbYmubDOCfkN3WH14U\"}"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4e7fcf12-afc4-4126-b199-956991b07d04","keyName":"e2e-auth-iso-a-52e163","subscription":"e2e-auth-iso-668b5a","tenant":"e2e-shared-a-989150","userId":"4e7fcf12-afc4-4126-b199-956991b07d04","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/auth-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-668b5a"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:56:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1332ed02-9d89-494b-abb2-21b0ace0829d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b81629dccf403a38c493734763f010c0c5dcf9266bfa599398f628dea58ce4d"} {"level":"info","ts":"2026-07-16T12:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/834d87bebff27ff1eb15188f5680cf15ff4c5be38cc32c8db50003089c2118de"} {"level":"info","ts":"2026-07-16T12:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38318fe854c7ec774ac5b947c40275d1b038b0520458b579eb800b67e846e4c8"} {"level":"info","ts":"2026-07-16T12:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a42422222617f456ba7edccd937acba16b0e0e9d29e47acf3e9086856cf301c"} {"level":"info","ts":"2026-07-16T12:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cae2a2b1bab580950102744ab7ce13b8489e1d4e624c055c75c0e32e3e13244"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbbd95f95b7dae93fe3d1b0193839d7f2a811fa33713b05ff9fca9e6935937fc"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d2e4a85308225aef171ca023d5c37d65a2b5a6be6c682fe8c0927f8498d6a85"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd942b7edb8d854ba3d21ffb1937d54c918d8b66c4113b3cb57b21720275a734"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1067ec0fccc302f29a372847150ab40d3f9c2c5b4383c4ec0b94b5ecdf04eec"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ad8bd59ba05773a5fafaca2f7928f3ea9575916b8439a8b4d1dd5f2b1045495"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd957d230894c4e375c061a908afa6ea1ca043f828f526f7e47b8f0a1455e679"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26fd0ed2f9277242d4ffb78dac2587c78eff6e5c5d9597c7e58f6e7befa53871"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86a9405e40b78556631dbe718205b9963f83a66409a14f88aa86a8b075feb1e2"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3cf593214ef2b77f62eef49cf2c655e8c42ab66e115b00a6c3baa06e1a9f6e3"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a74e5a269537c044bb63ff3a7a828636c7cc1f6a8c727cbce0a54c8d7e37ad1"} {"level":"info","ts":"2026-07-16T12:56:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1479fb2921695b742c305c6301ee6f5c929f716816b1a910a4729196c667aef4"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c"} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342"} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"info","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa"} {"level":"error","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c"} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c"} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c"} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2"} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2"} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d"} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2"} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00"} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:56:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d"} {"level":"info","ts":"2026-07-16T12:56:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f801089a539f811237f035a6892e035e07e7f43fda8242fe5e60904edc0bae90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f801089a539f811237f035a6892e035e07e7f43fda8242fe5e60904edc0bae90"} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2"} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2"} {"level":"debug","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd"} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d"} {"level":"info","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c"} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342"} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c"} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:57:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"} {"level":"error","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057"} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa"} {"level":"info","ts":"2026-07-16T12:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6"} {"level":"info","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46258","PortSpecifier":{"PortValue":46258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46258","PortSpecifier":{"PortValue":46258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206648,"nanos":964374389},"http":{"id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/sub-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12077b2a-000f-47a0-b3a2-3e73a85b9ba7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50360","PortSpecifier":{"PortValue":50360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50360","PortSpecifier":{"PortValue":50360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206649,"nanos":7119697},"http":{"id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/sub-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dfb9b61-9176-4d99-a853-b1a6f9b11516","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46262","PortSpecifier":{"PortValue":46262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46262","PortSpecifier":{"PortValue":46262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206649,"nanos":50384893},"http":{"id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","method":"GET","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wdDphsKXOb4yysC4_k1gy7mCLCCu1rTJkKlFTgeNloVNn6QgD9wiz5QsIbJi"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wdDphsKXOb4yysC4_k1gy7mCLCCu1rTJkKlFTgeNloVNn6QgD9wiz5QsIbJi\"}"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f896bcfd-177d-4ce4-8f5f-6bfa7bb7ceaf","keyName":"e2e-sub-iso-d1adff","subscription":"e2e-a-only-be2a37","tenant":"e2e-shared-a-989150","userId":"f896bcfd-177d-4ce4-8f5f-6bfa7bb7ceaf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/sub-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-be2a37"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9da8ee37-2ffc-4587-94e5-1bbfbe1344f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50362","PortSpecifier":{"PortValue":50362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50362","PortSpecifier":{"PortValue":50362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206649,"nanos":95511280},"http":{"id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","method":"GET","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VDYHi9SXLoG8SyPt_V6vAeL1h6Fnykyj3K1PQUFAEHRM097H2G3FyXfbxJiD"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VDYHi9SXLoG8SyPt_V6vAeL1h6Fnykyj3K1PQUFAEHRM097H2G3FyXfbxJiD\"}"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46ace11d-92c0-4301-89f4-45a5b602425e","keyName":"e2e-sub-iso-dd8491","subscription":"e2e-b-only-be2a37","tenant":"e2e-shared-b-293c75","userId":"46ace11d-92c0-4301-89f4-45a5b602425e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/sub-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-be2a37"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a76096ad-97d4-467a-bf01-b0edf23e47e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4a299ff-be8a-403b-b116-500127782630","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45956","PortSpecifier":{"PortValue":45956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4a299ff-be8a-403b-b116-500127782630","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4a299ff-be8a-403b-b116-500127782630","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45956","PortSpecifier":{"PortValue":45956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206669,"nanos":967611200},"http":{"id":"a4a299ff-be8a-403b-b116-500127782630","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4a299ff-be8a-403b-b116-500127782630","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4a299ff-be8a-403b-b116-500127782630","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4a299ff-be8a-403b-b116-500127782630","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4a299ff-be8a-403b-b116-500127782630","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4a299ff-be8a-403b-b116-500127782630","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4a299ff-be8a-403b-b116-500127782630","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/sub-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4a299ff-be8a-403b-b116-500127782630","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4a299ff-be8a-403b-b116-500127782630","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4a299ff-be8a-403b-b116-500127782630","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4a299ff-be8a-403b-b116-500127782630","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:57:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4a299ff-be8a-403b-b116-500127782630","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34548","PortSpecifier":{"PortValue":34548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43d29edb-42e7-4c80-83f5-b168349ef56a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34548","PortSpecifier":{"PortValue":34548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206670,"nanos":6634402},"http":{"id":"43d29edb-42e7-4c80-83f5-b168349ef56a","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/sub-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43d29edb-42e7-4c80-83f5-b168349ef56a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45960","PortSpecifier":{"PortValue":45960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a7c4484-e26e-46f1-842f-335929f2276f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45960","PortSpecifier":{"PortValue":45960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206670,"nanos":42612894},"http":{"id":"7a7c4484-e26e-46f1-842f-335929f2276f","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NFNlXFwOIai7T0N0_XqIldFmj3UGO16y23tfwfImmx1tJ3obGbM3GgvvTnPi"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NFNlXFwOIai7T0N0_XqIldFmj3UGO16y23tfwfImmx1tJ3obGbM3GgvvTnPi\"}"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0eb5a0bc-8dc2-4368-b408-e946ae3e9271","keyName":"e2e-sub-iso-8452f4","subscription":"e2e-shared-sub-cbf5aa","tenant":"e2e-shared-a-989150","userId":"0eb5a0bc-8dc2-4368-b408-e946ae3e9271","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/sub-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-cbf5aa"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a7c4484-e26e-46f1-842f-335929f2276f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34556","PortSpecifier":{"PortValue":34556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34556","PortSpecifier":{"PortValue":34556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206670,"nanos":73470824},"http":{"id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2FFt14KbLORDWWp6_8F1Km7WUWMXKTsWyPPwCxYSVNQfD3ZD09i37X2ppOF1"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2FFt14KbLORDWWp6_8F1Km7WUWMXKTsWyPPwCxYSVNQfD3ZD09i37X2ppOF1\"}"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5cdb6bc5-96e0-4d61-a579-9cab5aaf36fe","keyName":"e2e-sub-iso-2c4762","subscription":"e2e-shared-sub-cbf5aa","tenant":"e2e-shared-b-293c75","userId":"5cdb6bc5-96e0-4d61-a579-9cab5aaf36fe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/sub-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-cbf5aa"} {"level":"info","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:57:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93c10bb5-205a-43ca-9c4f-19a1106bb362","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9520e78db3a2d1a394bd229ebf5e5e0de4757f87496567efe4cf7f339553df2c"} {"level":"info","ts":"2026-07-16T12:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66329b7e775cfd330c8461691f88c7a8f54fa89d5e6acf77e7f6252eb74b4d6e"} {"level":"info","ts":"2026-07-16T12:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e106aed4278105e9b14898d8ce7d8a7c8b250366466f3e4799fd238292eeb1"} {"level":"info","ts":"2026-07-16T12:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d072f91dc1890024599fe945598ff9cab96b131598167c96b398e35eaa656c19"} {"level":"info","ts":"2026-07-16T12:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17c029c7bd65b4954e8da101781846e5df03f863f589f6e811d088ab791ee5cd"} {"level":"info","ts":"2026-07-16T12:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b42acdef86ed8cbc06e52b55e4c6f032839317c19398aa183bec2f1c97dfb342"} {"level":"info","ts":"2026-07-16T12:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9435b7979127a08f8f620d4e235996b0e46c5bf2ac3ee3a870703d7ee9a175"} {"level":"info","ts":"2026-07-16T12:57:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af5b713992c44a455e1a9f7a72022adb6cdc821b6b5677b21a0f4687e46411fa"} {"level":"debug","ts":"2026-07-16T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"debug","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"} {"level":"error","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"} {"level":"error","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d6951a8b830b74ec88a779599d672f4c53f24fa44915f9abf2b558767302fec"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"} {"level":"error","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64d2eaf38091d63c0b0e4d6d70403e9a44ad300c572ac3b50a7a21dd112a0915"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62890185c75c77d56335a7f30c83e405486d8810b3ab1b58aa397d9454f94d7d"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c239f8c928de58cc849c72f6e18021b9d893bf2034ee33b863405fd8bdc5cd14"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1a0d8b1ad830455996b014a50fe53686a383e98b726181493316bf393c67f94"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/798f88b411d001491613e6d93a143ab104b370362ba27a57f86e5f3344e5e23c"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f65cae1f2058718f5e1a23408b49dbf84b1d4b8bb3ee5c849e166d725ad30af2"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb89149e7334e595cebfea57461c7dccb8c9d01ab7b3020534eecfb218d72c00"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"error","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"} {"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"} {"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"} {"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede"} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f801089a539f811237f035a6892e035e07e7f43fda8242fe5e60904edc0bae90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6"} {"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f801089a539f811237f035a6892e035e07e7f43fda8242fe5e60904edc0bae90"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"} {"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"} {"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40044","PortSpecifier":{"PortValue":40044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40044","PortSpecifier":{"PortValue":40044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206731,"nanos":895457595},"http":{"id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206731,"nanos":937003732},"http":{"id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40058","PortSpecifier":{"PortValue":40058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40058","PortSpecifier":{"PortValue":40058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206731,"nanos":979812750},"http":{"id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj\"}"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","subscription":"e2e-rate-iso-a-9727cb","tenant":"e2e-shared-a-989150","userId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-9727cb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9727cb"} {"level":"debug","ts":"2026-07-16T12:58:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","selected_subscription":"e2e-rate-iso-a-9727cb","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-9727cb@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T12:58:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:58:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40062","PortSpecifier":{"PortValue":40062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40062","PortSpecifier":{"PortValue":40062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206733,"nanos":45746532},"http":{"id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj"} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj\"}"} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","subscription":"e2e-rate-iso-a-9727cb","tenant":"e2e-shared-a-989150","userId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-9727cb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9727cb"} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","selected_subscription":"e2e-rate-iso-a-9727cb","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-9727cb@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55772","PortSpecifier":{"PortValue":55772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2894986a-bc18-4aa0-b14d-0de69f296da4","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55772","PortSpecifier":{"PortValue":55772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206734,"nanos":86622346},"http":{"id":"2894986a-bc18-4aa0-b14d-0de69f296da4","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj"} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj\"}"} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","subscription":"e2e-rate-iso-a-9727cb","tenant":"e2e-shared-a-989150","userId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-9727cb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9727cb"} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","selected_subscription":"e2e-rate-iso-a-9727cb","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-9727cb@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39984","PortSpecifier":{"PortValue":39984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca2d2171-d202-4743-9357-97842fd37ad9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39984","PortSpecifier":{"PortValue":39984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206749,"nanos":139031961},"http":{"id":"ca2d2171-d202-4743-9357-97842fd37ad9","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49640","PortSpecifier":{"PortValue":49640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49640","PortSpecifier":{"PortValue":49640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206749,"nanos":175520320},"http":{"id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39998","PortSpecifier":{"PortValue":39998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39998","PortSpecifier":{"PortValue":39998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206749,"nanos":216494317},"http":{"id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP\"}"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","subscription":"e2e-rate-iso-a-a0440a","tenant":"e2e-shared-a-989150","userId":"c913ce78-48fc-48ef-b9d6-39962b209197","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-a0440a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0440a"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","selected_subscription":"e2e-rate-iso-a-a0440a","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-a0440a@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40008","PortSpecifier":{"PortValue":40008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40008","PortSpecifier":{"PortValue":40008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206750,"nanos":252945872},"http":{"id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP"} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP\"}"} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","subscription":"e2e-rate-iso-a-a0440a","tenant":"e2e-shared-a-989150","userId":"c913ce78-48fc-48ef-b9d6-39962b209197","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-a0440a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0440a"} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","selected_subscription":"e2e-rate-iso-a-a0440a","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-a0440a@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40014","PortSpecifier":{"PortValue":40014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40014","PortSpecifier":{"PortValue":40014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206751,"nanos":297195782},"http":{"id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP\"}"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","subscription":"e2e-rate-iso-a-a0440a","tenant":"e2e-shared-a-989150","userId":"c913ce78-48fc-48ef-b9d6-39962b209197","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-a0440a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0440a"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","selected_subscription":"e2e-rate-iso-a-a0440a","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-a0440a@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49654","PortSpecifier":{"PortValue":49654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","method":"POST","path":"/ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75/v1/completions","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49654","PortSpecifier":{"PortValue":49654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206751,"nanos":337043427},"http":{"id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SpjmeQ0Nvxhlrdjr_MtXORB7Vdq6oNZsgB6M6A79yg2EE9884C2WDHKWc0Hv"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SpjmeQ0Nvxhlrdjr_MtXORB7Vdq6oNZsgB6M6A79yg2EE9884C2WDHKWc0Hv\"}"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"572bce33-dbaa-4f8c-9519-495495eb790d","keyName":"e2e-rate-b-a0440a","subscription":"e2e-rate-iso-b-a0440a","tenant":"e2e-shared-b-293c75","userId":"572bce33-dbaa-4f8c-9519-495495eb790d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75\",\"requestedSubscription\":\"e2e-rate-iso-b-a0440a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-293c75","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a0440a","namespace":"ai-tenant-e2e-shared-b-293c75","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a0440a"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"572bce33-dbaa-4f8c-9519-495495eb790d","keyName":"e2e-rate-b-a0440a","selected_subscription":"e2e-rate-iso-b-a0440a","selected_subscription_key":"ai-tenant-e2e-shared-b-293c75/e2e-rate-iso-b-a0440a@ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-293c75","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a0440a","namespace":"ai-tenant-e2e-shared-b-293c75","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"} {"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"} {"level":"info","ts":"2026-07-16T12:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057"} {"level":"info","ts":"2026-07-16T12:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"} {"level":"info","ts":"2026-07-16T12:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"} {"level":"info","ts":"2026-07-16T12:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f801089a539f811237f035a6892e035e07e7f43fda8242fe5e60904edc0bae90"}