--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0"} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0"} {"level":"error","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622"} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332"} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3"} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638"} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac"} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac"} {"level":"info","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1"} {"level":"error","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc4f00530227b8c78538a6e935e4631c5aa1e98c331c294c22e4f37b3046450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc4f00530227b8c78538a6e935e4631c5aa1e98c331c294c22e4f37b3046450","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc4f00530227b8c78538a6e935e4631c5aa1e98c331c294c22e4f37b3046450"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc4f00530227b8c78538a6e935e4631c5aa1e98c331c294c22e4f37b3046450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc4f00530227b8c78538a6e935e4631c5aa1e98c331c294c22e4f37b3046450"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc4f00530227b8c78538a6e935e4631c5aa1e98c331c294c22e4f37b3046450","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc4f00530227b8c78538a6e935e4631c5aa1e98c331c294c22e4f37b3046450","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c"} {"level":"debug","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc4f00530227b8c78538a6e935e4631c5aa1e98c331c294c22e4f37b3046450"} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae"} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae"} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae"} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae"} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae"} {"level":"info","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"153bd238-8637-4167-99bf-d1b1072a763b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57218","PortSpecifier":{"PortValue":57218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"153bd238-8637-4167-99bf-d1b1072a763b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"153bd238-8637-4167-99bf-d1b1072a763b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57218","PortSpecifier":{"PortValue":57218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338336,"nanos":9935500},"http":{"id":"153bd238-8637-4167-99bf-d1b1072a763b","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"153bd238-8637-4167-99bf-d1b1072a763b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"153bd238-8637-4167-99bf-d1b1072a763b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"153bd238-8637-4167-99bf-d1b1072a763b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"153bd238-8637-4167-99bf-d1b1072a763b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"153bd238-8637-4167-99bf-d1b1072a763b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"153bd238-8637-4167-99bf-d1b1072a763b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"153bd238-8637-4167-99bf-d1b1072a763b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"153bd238-8637-4167-99bf-d1b1072a763b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"153bd238-8637-4167-99bf-d1b1072a763b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"153bd238-8637-4167-99bf-d1b1072a763b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"153bd238-8637-4167-99bf-d1b1072a763b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b07644d0-8be8-4fe5-91a7-4873e420530d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338336,"nanos":74400028},"http":{"id":"b07644d0-8be8-4fe5-91a7-4873e420530d","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/auth-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b07644d0-8be8-4fe5-91a7-4873e420530d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"240a8e55-3592-4139-9726-00eca2173e59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57228","PortSpecifier":{"PortValue":57228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"240a8e55-3592-4139-9726-00eca2173e59","method":"GET","path":"/maas-api/v1/api-keys/35d64774-de60-4381-8e76-aebd1a17f326","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"240a8e55-3592-4139-9726-00eca2173e59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57228","PortSpecifier":{"PortValue":57228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338336,"nanos":149388337},"http":{"id":"240a8e55-3592-4139-9726-00eca2173e59","method":"GET","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/35d64774-de60-4381-8e76-aebd1a17f326",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"240a8e55-3592-4139-9726-00eca2173e59","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"240a8e55-3592-4139-9726-00eca2173e59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"240a8e55-3592-4139-9726-00eca2173e59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/35d64774-de60-4381-8e76-aebd1a17f326",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240a8e55-3592-4139-9726-00eca2173e59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240a8e55-3592-4139-9726-00eca2173e59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240a8e55-3592-4139-9726-00eca2173e59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"240a8e55-3592-4139-9726-00eca2173e59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240a8e55-3592-4139-9726-00eca2173e59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240a8e55-3592-4139-9726-00eca2173e59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"240a8e55-3592-4139-9726-00eca2173e59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"240a8e55-3592-4139-9726-00eca2173e59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67323673-e0ef-4e4f-8788-7164bc063525","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34630","PortSpecifier":{"PortValue":34630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67323673-e0ef-4e4f-8788-7164bc063525","method":"GET","path":"/maas-api/v1/api-keys/1567d432-42d4-49e5-bf99-2e2c0cf1b199","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67323673-e0ef-4e4f-8788-7164bc063525","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34630","PortSpecifier":{"PortValue":34630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338336,"nanos":193182460},"http":{"id":"67323673-e0ef-4e4f-8788-7164bc063525","method":"GET","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1567d432-42d4-49e5-bf99-2e2c0cf1b199",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67323673-e0ef-4e4f-8788-7164bc063525","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67323673-e0ef-4e4f-8788-7164bc063525","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67323673-e0ef-4e4f-8788-7164bc063525","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1567d432-42d4-49e5-bf99-2e2c0cf1b199",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67323673-e0ef-4e4f-8788-7164bc063525","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67323673-e0ef-4e4f-8788-7164bc063525","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67323673-e0ef-4e4f-8788-7164bc063525","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/auth-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67323673-e0ef-4e4f-8788-7164bc063525","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67323673-e0ef-4e4f-8788-7164bc063525","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67323673-e0ef-4e4f-8788-7164bc063525","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67323673-e0ef-4e4f-8788-7164bc063525","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67323673-e0ef-4e4f-8788-7164bc063525","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47976","PortSpecifier":{"PortValue":47976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47976","PortSpecifier":{"PortValue":47976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338353,"nanos":261366127},"http":{"id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5055657b-e315-4d64-aafb-ab9f1ddfd218","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55976","PortSpecifier":{"PortValue":55976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55976","PortSpecifier":{"PortValue":55976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338353,"nanos":299904304},"http":{"id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/auth-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"957b71be-5c2e-4e20-8164-b590fdd2fb04","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47984","PortSpecifier":{"PortValue":47984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33223fea-8877-42d1-9d78-56381c6cd6cc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47984","PortSpecifier":{"PortValue":47984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338353,"nanos":345012630},"http":{"id":"33223fea-8877-42d1-9d78-56381c6cd6cc","method":"GET","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wawEmHpGC5kW32nU_LbMAuD6yih3yztIECbbCpdj8Oo0NUb2GIPmKfH1Pihr"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wawEmHpGC5kW32nU_LbMAuD6yih3yztIECbbCpdj8Oo0NUb2GIPmKfH1Pihr\"}"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce112ba4-2533-490f-a895-5b85700e917b","keyName":"e2e-auth-iso-a-24c28c","subscription":"e2e-auth-iso-741dfb","tenant":"e2e-shared-a-ad1b67","userId":"ce112ba4-2533-490f-a895-5b85700e917b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-741dfb"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:32:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33223fea-8877-42d1-9d78-56381c6cd6cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41630","PortSpecifier":{"PortValue":41630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41630","PortSpecifier":{"PortValue":41630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338370,"nanos":398839115},"http":{"id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f9bc5f9-61c2-4516-929e-9b7caa9a3f0a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43646","PortSpecifier":{"PortValue":43646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43646","PortSpecifier":{"PortValue":43646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338370,"nanos":434332388},"http":{"id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/auth-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf2f1394-c761-4fa4-a74e-2b63dbee4898","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43660","PortSpecifier":{"PortValue":43660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43660","PortSpecifier":{"PortValue":43660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338370,"nanos":475077776},"http":{"id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","method":"GET","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dfVx05kP8IRgzCsO_c6OZAeChvf4hVGd42lfECsnvr2VlF8sBOv8L088MT1y"} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dfVx05kP8IRgzCsO_c6OZAeChvf4hVGd42lfECsnvr2VlF8sBOv8L088MT1y\"}"} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-18T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5582b094-b9a5-4ec9-9eb0-634e5aaa1eba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35242","PortSpecifier":{"PortValue":35242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35242","PortSpecifier":{"PortValue":35242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338389,"nanos":778275633},"http":{"id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ef5c6d2-c5b8-4509-9687-c5b4f41fe45f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40068","PortSpecifier":{"PortValue":40068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b35ae6fe-c3ea-4f38-be17-238199a20417","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40068","PortSpecifier":{"PortValue":40068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338389,"nanos":814121066},"http":{"id":"b35ae6fe-c3ea-4f38-be17-238199a20417","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/auth-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b35ae6fe-c3ea-4f38-be17-238199a20417","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35254","PortSpecifier":{"PortValue":35254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f329472c-0933-40fc-8079-72ca6ce368ff","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35254","PortSpecifier":{"PortValue":35254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338389,"nanos":846468458},"http":{"id":"f329472c-0933-40fc-8079-72ca6ce368ff","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f329472c-0933-40fc-8079-72ca6ce368ff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40076","PortSpecifier":{"PortValue":40076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40076","PortSpecifier":{"PortValue":40076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338389,"nanos":877504177},"http":{"id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/auth-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9975f17-aa54-4e90-8d4a-95e41b0b5f6e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51038","PortSpecifier":{"PortValue":51038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae244472-8568-4b36-9431-02bb4e9856c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51038","PortSpecifier":{"PortValue":51038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338407,"nanos":621923969},"http":{"id":"ae244472-8568-4b36-9431-02bb4e9856c3","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae244472-8568-4b36-9431-02bb4e9856c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55f52594-6379-4f81-b353-7c4624365245","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39918","PortSpecifier":{"PortValue":39918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55f52594-6379-4f81-b353-7c4624365245","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55f52594-6379-4f81-b353-7c4624365245","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39918","PortSpecifier":{"PortValue":39918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338407,"nanos":687578217},"http":{"id":"55f52594-6379-4f81-b353-7c4624365245","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55f52594-6379-4f81-b353-7c4624365245","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55f52594-6379-4f81-b353-7c4624365245","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55f52594-6379-4f81-b353-7c4624365245","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55f52594-6379-4f81-b353-7c4624365245","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55f52594-6379-4f81-b353-7c4624365245","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55f52594-6379-4f81-b353-7c4624365245","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/auth-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55f52594-6379-4f81-b353-7c4624365245","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55f52594-6379-4f81-b353-7c4624365245","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55f52594-6379-4f81-b353-7c4624365245","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55f52594-6379-4f81-b353-7c4624365245","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55f52594-6379-4f81-b353-7c4624365245","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34868","PortSpecifier":{"PortValue":34868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","method":"GET","path":"/maas-api/v1/api-keys/cea5dc38-acc7-41c4-bea2-7f7eafc760d3","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34868","PortSpecifier":{"PortValue":34868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338407,"nanos":748646835},"http":{"id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","method":"GET","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cea5dc38-acc7-41c4-bea2-7f7eafc760d3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cea5dc38-acc7-41c4-bea2-7f7eafc760d3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/auth-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba9e4e83-3c3d-4f35-8f59-fa7ffa29f687","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37898","PortSpecifier":{"PortValue":37898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","method":"GET","path":"/maas-api/v1/api-keys/cea5dc38-acc7-41c4-bea2-7f7eafc760d3","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37898","PortSpecifier":{"PortValue":37898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338407,"nanos":791315468},"http":{"id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","method":"GET","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cea5dc38-acc7-41c4-bea2-7f7eafc760d3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cea5dc38-acc7-41c4-bea2-7f7eafc760d3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f76a4828-8535-4204-97c3-b07ffc29bd2d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33114","PortSpecifier":{"PortValue":33114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"122c8808-c50d-4c89-b69a-4f34a26014ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33114","PortSpecifier":{"PortValue":33114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338425,"nanos":532899410},"http":{"id":"122c8808-c50d-4c89-b69a-4f34a26014ec","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"122c8808-c50d-4c89-b69a-4f34a26014ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59006","PortSpecifier":{"PortValue":59006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59006","PortSpecifier":{"PortValue":59006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338425,"nanos":560932179},"http":{"id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/auth-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fc8ad71-e9ac-41cd-94e3-b9b6db4dea43","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33128","PortSpecifier":{"PortValue":33128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33128","PortSpecifier":{"PortValue":33128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338425,"nanos":589339272},"http":{"id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12gPIQxdQVlNye6HU_ZWG464eikEn3GtUs3KhsfPb6VQI51j9aQfy40CQdhCQ"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12gPIQxdQVlNye6HU_ZWG464eikEn3GtUs3KhsfPb6VQI51j9aQfy40CQdhCQ\"}"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee1a09d1-5812-4195-9e64-552562a3b1c7","keyName":"e2e-auth-iso-a-84e1c6","subscription":"e2e-auth-iso-be1045","tenant":"e2e-shared-a-ad1b67","userId":"ee1a09d1-5812-4195-9e64-552562a3b1c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/auth-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-be1045"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7548fea7-fb5a-4283-9fc8-27a71a849ec2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70282fcafd1fb5b1bb34c753857941f6eb67a34b5d6c0e85b716c9cf07bb1638"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fc4f00530227b8c78538a6e935e4631c5aa1e98c331c294c22e4f37b3046450"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84b33e7f8f152c8335564107352008a3b1a3d2942502dc9f13fe943b3a0f4d89"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/581805077e4c4133cfc23d7edd49a2688a086eb23d7ed0dfaedaf4d8b5d315ae"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/748757006d033a2d1041eb11c67f9579f5372f9ace62dd63fcf7d4159cb9c210"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6ac8208b6e2f060dd500ae2f8969e0a4d1b8a0dcca26d5ea3c612727348b47f"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f59a1c0b2342a2ed63c2700d907908f833be58e375f0f9e44b00522321d6469a"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6891ff4ffceec0d06fff1234c7026f9ce6383920ab1bb1c9aeae023be6ea799e"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c75363bb4eb5de96fdbfed94fa0dc4b0552bcdca3497693b8c4648bde3645622"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/825556d65cff9f22ee8a7654ea914da6e0cfc28070ffc34af050d15603f4fff0"} {"level":"info","ts":"2026-07-18T01:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca8ab9208e5657efb0ccc7597830d78b10f079f7c7b1b4299543f4fc8148a332"} {"level":"info","ts":"2026-07-18T01:33:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77a33a82dd5b2223c9cb0d50a5e8f28e540d33d3b9e5ec08ae28d6191b04c1b1"} {"level":"info","ts":"2026-07-18T01:33:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e3ad08ab8edc33f0cc734aebe70ad9f423d7450f4da9f3eb99cd5befc88fe4c"} {"level":"info","ts":"2026-07-18T01:33:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2973a052e1568b4689e979e3682f6d0fa7f70ff92a2fac62dc3bfd438615b7cd"} {"level":"info","ts":"2026-07-18T01:33:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8995591f9577aabf9daefde1182c020b6106ed94beb2745d4b74accae67d11b3"} {"level":"info","ts":"2026-07-18T01:33:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b73b56a4eb8514a7594d15ec5c6184920c06500ecfa21649552192f5cabd98c"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d"} {"level":"error","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b"} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"} {"level":"info","ts":"2026-07-18T01:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390"} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"debug","ts":"2026-07-18T01:34:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66"} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66"} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09"} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09"} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09"} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2"} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2"} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2"} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2"} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2"} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"} {"level":"error","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac"} {"level":"debug","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2"} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66"} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:34:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:34:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:34:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:34:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390"} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924"} {"level":"info","ts":"2026-07-18T01:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"} {"level":"info","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53618","PortSpecifier":{"PortValue":53618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53618","PortSpecifier":{"PortValue":53618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338498,"nanos":458858714},"http":{"id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/sub-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f88d5be1-3a33-459a-a4a7-27bcaa18542b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51458","PortSpecifier":{"PortValue":51458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93a8ce8e-914e-44bb-acf1-f43d99235560","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51458","PortSpecifier":{"PortValue":51458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338498,"nanos":499043898},"http":{"id":"93a8ce8e-914e-44bb-acf1-f43d99235560","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/sub-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93a8ce8e-914e-44bb-acf1-f43d99235560","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338498,"nanos":537780895},"http":{"id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","method":"GET","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16KKJRs6SDcHWPtza_kDV1yAJLn6yeqSjMxa3lHNxOSuoxTKqP9G9LffJGvQq"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16KKJRs6SDcHWPtza_kDV1yAJLn6yeqSjMxa3lHNxOSuoxTKqP9G9LffJGvQq\"}"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"464d05a3-fa3e-46f7-9722-bcadfd80724a","keyName":"e2e-sub-iso-34aa45","subscription":"e2e-a-only-e2c8b3","tenant":"e2e-shared-a-ad1b67","userId":"464d05a3-fa3e-46f7-9722-bcadfd80724a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/sub-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e2c8b3"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0655fb4-b8aa-4189-9941-90ba5f1ac911","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51464","PortSpecifier":{"PortValue":51464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f06c5495-b879-4763-b2c8-3bd6d4827732","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51464","PortSpecifier":{"PortValue":51464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338498,"nanos":574911792},"http":{"id":"f06c5495-b879-4763-b2c8-3bd6d4827732","method":"GET","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bUN9UKqDcG2KiDKw_4aR9AxKIng4fS1QIGBrZuQw3dDeL1CjMcMZ8yy3RtEk"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bUN9UKqDcG2KiDKw_4aR9AxKIng4fS1QIGBrZuQw3dDeL1CjMcMZ8yy3RtEk\"}"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88d2d3fd-5863-4fda-9435-ab0e251e4611","keyName":"e2e-sub-iso-ed1414","subscription":"e2e-b-only-e2c8b3","tenant":"e2e-shared-b-0f7fdc","userId":"88d2d3fd-5863-4fda-9435-ab0e251e4611","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/sub-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e2c8b3"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f06c5495-b879-4763-b2c8-3bd6d4827732","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59002","PortSpecifier":{"PortValue":59002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59002","PortSpecifier":{"PortValue":59002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338517,"nanos":841411934},"http":{"id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/sub-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9c182a1-7f37-4435-b27f-6a8f3ea76cf0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44620","PortSpecifier":{"PortValue":44620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd1567ab-d9ce-443d-b407-f00096b797ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44620","PortSpecifier":{"PortValue":44620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338517,"nanos":878469841},"http":{"id":"fd1567ab-d9ce-443d-b407-f00096b797ea","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/sub-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd1567ab-d9ce-443d-b407-f00096b797ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59004","PortSpecifier":{"PortValue":59004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59004","PortSpecifier":{"PortValue":59004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338517,"nanos":912735668},"http":{"id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BC7YmbW3fGVvIP2n_ggkRYZ3kMJ5j38FPtKtp8YVIEj6ck3WgFaxs2lSILHm"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BC7YmbW3fGVvIP2n_ggkRYZ3kMJ5j38FPtKtp8YVIEj6ck3WgFaxs2lSILHm\"}"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0e591930-9a5c-4044-932f-2391b61e3bc7","keyName":"e2e-sub-iso-e7a329","subscription":"e2e-shared-sub-2d0df0","tenant":"e2e-shared-a-ad1b67","userId":"0e591930-9a5c-4044-932f-2391b61e3bc7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/sub-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2d0df0"} {"level":"info","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b3c9c6-6056-439c-b4a1-070f329e60c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44630","PortSpecifier":{"PortValue":44630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44630","PortSpecifier":{"PortValue":44630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338517,"nanos":940040577},"http":{"id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-106DbVmudhyG3zOPc_t6gVZfU69N1OgkFAsRngmRO4ZrJvo2cHHhegWS9taaZ"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-106DbVmudhyG3zOPc_t6gVZfU69N1OgkFAsRngmRO4ZrJvo2cHHhegWS9taaZ\"}"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9302e9b-27b8-4b56-8bcf-e05668d21cde","keyName":"e2e-sub-iso-a3f3d2","subscription":"e2e-shared-sub-2d0df0","tenant":"e2e-shared-b-0f7fdc","userId":"a9302e9b-27b8-4b56-8bcf-e05668d21cde","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/sub-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2d0df0"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb0dc9ad-467c-44f9-b5a8-6e9bf486e984","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39d06f6dfc5b9a582dca47a674f928dc49463178203667a0348b48bbac485b31"} {"level":"info","ts":"2026-07-18T01:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eed26765a2acacf81f4796d15526d5847ac63221686545b7433a05ce743b6f0"} {"level":"info","ts":"2026-07-18T01:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef0f2bb67582583f53a2ae145b797488219d93a556d6b194a613126a711e0708"} {"level":"info","ts":"2026-07-18T01:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a523fcaa13811e6e37620c161b608ef642b30c71d11041668edf78a73c3d818"} {"level":"info","ts":"2026-07-18T01:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/622c65feb200b828d7930aaf8abac8eb61388a90d2ced15da93ae9e8ef00d538"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31319ff4efc014cca7b13dd2279a6e5ef135a45d5dc353bfa2209ce216cbbb09"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/944a9a41b0f82854398c9e6a85b0ee66f0df378bc5418551f502275d463a5569"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c1ae0bfbb0d12626dcdcc13b7a8026cb60ed6ff7bf3526ae8676cb09038ff2"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e26a6c7476e738d46fa8d39d57127ca907820ab2b934c0bbdc24205aad85390"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b647e8c66b657774f8aeff3ebf76496eb8347d089bc6fe76c57134ea9fdc923"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c9e47101a92d5d0ec925a08057304002894f5a011d500d9ee8bbdd410ea5c6b"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a43df3ef84fafd8c8df963d15e1d647af69347fb3059dbc3624cc5cf0795a9e9"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e64aca5f7b00efb4400062ad57682db32d89b0d5700fa49c185b955eb98de10"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f62a2f2e1d6351b5a437d0e796d8f72c1d2f757dc27a2c0a64a49620c44c46d"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79b87b36506312556c00cac4f499aed2f2ce4ed8c59cf7798d924e4dd59fa924"} {"level":"info","ts":"2026-07-18T01:35:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b412c132c387d2c4688983b5fd6bdbb6484274ed898624f8e26ae8a4af719f66"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e"} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e"} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b"} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25"} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25"} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25"} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"debug","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b"} {"level":"debug","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b"} {"level":"debug","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b"} {"level":"debug","ts":"2026-07-18T01:35:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:35:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"info","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b"} {"level":"debug","ts":"2026-07-18T01:36:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T01:36:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"} {"level":"info","ts":"2026-07-18T01:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"} {"level":"info","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43622","PortSpecifier":{"PortValue":43622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2413d9a-915a-4f57-846e-ba0879615d0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43622","PortSpecifier":{"PortValue":43622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338585,"nanos":371089106},"http":{"id":"a2413d9a-915a-4f57-846e-ba0879615d0f","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2413d9a-915a-4f57-846e-ba0879615d0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40756","PortSpecifier":{"PortValue":40756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40756","PortSpecifier":{"PortValue":40756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338585,"nanos":410128817},"http":{"id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/rate-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36a2aee1-6db3-4015-92e5-f0b5d93085c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43636","PortSpecifier":{"PortValue":43636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7d574dc-78d0-4190-ad2b-586e0634556f","method":"POST","path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43636","PortSpecifier":{"PortValue":43636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338585,"nanos":446678155},"http":{"id":"c7d574dc-78d0-4190-ad2b-586e0634556f","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ctVPOU2vDKWJ7DoN_F1BD5xoImBMYdeMV66DTbsJsGYUIWVu9OgiZcIFrgL3"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ctVPOU2vDKWJ7DoN_F1BD5xoImBMYdeMV66DTbsJsGYUIWVu9OgiZcIFrgL3\"}"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fb042fe-cf32-437b-bb37-299faf9936c9","keyName":"e2e-rate-a-3497e4","subscription":"e2e-rate-iso-a-3497e4","tenant":"e2e-shared-a-ad1b67","userId":"6fb042fe-cf32-437b-bb37-299faf9936c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\",\"requestedSubscription\":\"e2e-rate-iso-a-3497e4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3497e4","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3497e4"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fb042fe-cf32-437b-bb37-299faf9936c9","keyName":"e2e-rate-a-3497e4","selected_subscription":"e2e-rate-iso-a-3497e4","selected_subscription_key":"ai-tenant-e2e-shared-a-ad1b67/e2e-rate-iso-a-3497e4@ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3497e4","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7d574dc-78d0-4190-ad2b-586e0634556f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d782e15e-1269-4391-9683-bb4372456043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43652","PortSpecifier":{"PortValue":43652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d782e15e-1269-4391-9683-bb4372456043","method":"POST","path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d782e15e-1269-4391-9683-bb4372456043","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43652","PortSpecifier":{"PortValue":43652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338586,"nanos":505268918},"http":{"id":"d782e15e-1269-4391-9683-bb4372456043","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ctVPOU2vDKWJ7DoN_F1BD5xoImBMYdeMV66DTbsJsGYUIWVu9OgiZcIFrgL3"} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d782e15e-1269-4391-9683-bb4372456043","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ctVPOU2vDKWJ7DoN_F1BD5xoImBMYdeMV66DTbsJsGYUIWVu9OgiZcIFrgL3\"}"} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fb042fe-cf32-437b-bb37-299faf9936c9","keyName":"e2e-rate-a-3497e4","subscription":"e2e-rate-iso-a-3497e4","tenant":"e2e-shared-a-ad1b67","userId":"6fb042fe-cf32-437b-bb37-299faf9936c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d782e15e-1269-4391-9683-bb4372456043","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\",\"requestedSubscription\":\"e2e-rate-iso-a-3497e4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3497e4","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d782e15e-1269-4391-9683-bb4372456043","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3497e4"} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d782e15e-1269-4391-9683-bb4372456043","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fb042fe-cf32-437b-bb37-299faf9936c9","keyName":"e2e-rate-a-3497e4","selected_subscription":"e2e-rate-iso-a-3497e4","selected_subscription_key":"ai-tenant-e2e-shared-a-ad1b67/e2e-rate-iso-a-3497e4@ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3497e4","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d782e15e-1269-4391-9683-bb4372456043","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d782e15e-1269-4391-9683-bb4372456043","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43660","PortSpecifier":{"PortValue":43660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","method":"POST","path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43660","PortSpecifier":{"PortValue":43660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338587,"nanos":540160512},"http":{"id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ctVPOU2vDKWJ7DoN_F1BD5xoImBMYdeMV66DTbsJsGYUIWVu9OgiZcIFrgL3"} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ctVPOU2vDKWJ7DoN_F1BD5xoImBMYdeMV66DTbsJsGYUIWVu9OgiZcIFrgL3\"}"} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fb042fe-cf32-437b-bb37-299faf9936c9","keyName":"e2e-rate-a-3497e4","subscription":"e2e-rate-iso-a-3497e4","tenant":"e2e-shared-a-ad1b67","userId":"6fb042fe-cf32-437b-bb37-299faf9936c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\",\"requestedSubscription\":\"e2e-rate-iso-a-3497e4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3497e4","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3497e4"} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fb042fe-cf32-437b-bb37-299faf9936c9","keyName":"e2e-rate-a-3497e4","selected_subscription":"e2e-rate-iso-a-3497e4","selected_subscription_key":"ai-tenant-e2e-shared-a-ad1b67/e2e-rate-iso-a-3497e4@ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3497e4","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3d60f89-dd34-40d1-a162-de5933fbcff0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37655263-37bf-4f57-9795-268561cbc0a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60084","PortSpecifier":{"PortValue":60084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37655263-37bf-4f57-9795-268561cbc0a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37655263-37bf-4f57-9795-268561cbc0a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60084","PortSpecifier":{"PortValue":60084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338600,"nanos":342919958},"http":{"id":"37655263-37bf-4f57-9795-268561cbc0a4","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37655263-37bf-4f57-9795-268561cbc0a4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37655263-37bf-4f57-9795-268561cbc0a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37655263-37bf-4f57-9795-268561cbc0a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.107:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37655263-37bf-4f57-9795-268561cbc0a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37655263-37bf-4f57-9795-268561cbc0a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37655263-37bf-4f57-9795-268561cbc0a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37655263-37bf-4f57-9795-268561cbc0a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37655263-37bf-4f57-9795-268561cbc0a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37655263-37bf-4f57-9795-268561cbc0a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37655263-37bf-4f57-9795-268561cbc0a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37655263-37bf-4f57-9795-268561cbc0a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43310","PortSpecifier":{"PortValue":43310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d3a2722-9dea-44ef-b52e-65454078ab56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43310","PortSpecifier":{"PortValue":43310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338600,"nanos":387262570},"http":{"id":"6d3a2722-9dea-44ef-b52e-65454078ab56","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"]}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b96d485b94fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6b59de8-3b7f-4a28-b2aa-7ef2605d121e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90d70cba-1d59-4af6-97e5-e839a3f86c9c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.109:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/rate-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d3a2722-9dea-44ef-b52e-65454078ab56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60098","PortSpecifier":{"PortValue":60098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","method":"POST","path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60098","PortSpecifier":{"PortValue":60098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338600,"nanos":423664789},"http":{"id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LdnzONtSeC5B88x9_h5OO5B5higO6Ku1m1JG9hGZmciiWG1pD5f1O8tzrPNv"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LdnzONtSeC5B88x9_h5OO5B5higO6Ku1m1JG9hGZmciiWG1pD5f1O8tzrPNv\"}"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59ad45b2-010a-4700-a31c-aa048b8ba145","keyName":"e2e-rate-a-19aaea","subscription":"e2e-rate-iso-a-19aaea","tenant":"e2e-shared-a-ad1b67","userId":"59ad45b2-010a-4700-a31c-aa048b8ba145","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\",\"requestedSubscription\":\"e2e-rate-iso-a-19aaea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19aaea","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19aaea"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59ad45b2-010a-4700-a31c-aa048b8ba145","keyName":"e2e-rate-a-19aaea","selected_subscription":"e2e-rate-iso-a-19aaea","selected_subscription_key":"ai-tenant-e2e-shared-a-ad1b67/e2e-rate-iso-a-19aaea@ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19aaea","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e30dca8c-9e29-418b-88d2-d3c02003cf7d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60114","PortSpecifier":{"PortValue":60114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","method":"POST","path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60114","PortSpecifier":{"PortValue":60114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338601,"nanos":460101856},"http":{"id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LdnzONtSeC5B88x9_h5OO5B5higO6Ku1m1JG9hGZmciiWG1pD5f1O8tzrPNv"} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LdnzONtSeC5B88x9_h5OO5B5higO6Ku1m1JG9hGZmciiWG1pD5f1O8tzrPNv\"}"} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59ad45b2-010a-4700-a31c-aa048b8ba145","keyName":"e2e-rate-a-19aaea","subscription":"e2e-rate-iso-a-19aaea","tenant":"e2e-shared-a-ad1b67","userId":"59ad45b2-010a-4700-a31c-aa048b8ba145","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\",\"requestedSubscription\":\"e2e-rate-iso-a-19aaea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19aaea","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19aaea"} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59ad45b2-010a-4700-a31c-aa048b8ba145","keyName":"e2e-rate-a-19aaea","selected_subscription":"e2e-rate-iso-a-19aaea","selected_subscription_key":"ai-tenant-e2e-shared-a-ad1b67/e2e-rate-iso-a-19aaea@ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19aaea","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b6999e5-2f3a-45bb-b2e1-8ec3c8f15e12","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60118","PortSpecifier":{"PortValue":60118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e69f678b-cb35-4906-850a-3b62901f83fb","method":"POST","path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions","host":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60118","PortSpecifier":{"PortValue":60118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.107:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338602,"nanos":493473456},"http":{"id":"e69f678b-cb35-4906-850a-3b62901f83fb","method":"POST","headers":{":authority":"e2e-shared-a-ad1b67.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LdnzONtSeC5B88x9_h5OO5B5higO6Ku1m1JG9hGZmciiWG1pD5f1O8tzrPNv"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LdnzONtSeC5B88x9_h5OO5B5higO6Ku1m1JG9hGZmciiWG1pD5f1O8tzrPNv\"}"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59ad45b2-010a-4700-a31c-aa048b8ba145","keyName":"e2e-rate-a-19aaea","subscription":"e2e-rate-iso-a-19aaea","tenant":"e2e-shared-a-ad1b67","userId":"59ad45b2-010a-4700-a31c-aa048b8ba145","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\",\"requestedSubscription\":\"e2e-rate-iso-a-19aaea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ad1b67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19aaea","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ad1b67/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-19aaea"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59ad45b2-010a-4700-a31c-aa048b8ba145","keyName":"e2e-rate-a-19aaea","selected_subscription":"e2e-rate-iso-a-19aaea","selected_subscription_key":"ai-tenant-e2e-shared-a-ad1b67/e2e-rate-iso-a-19aaea@ai-tenant-e2e-shared-a-ad1b67/rate-test-model-ad1b67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ad1b67","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-19aaea","namespace":"ai-tenant-e2e-shared-a-ad1b67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e69f678b-cb35-4906-850a-3b62901f83fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43322","PortSpecifier":{"PortValue":43322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","method":"POST","path":"/ai-tenant-e2e-shared-b-0f7fdc/rate-test-model-0f7fdc/v1/completions","host":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43322","PortSpecifier":{"PortValue":43322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.109:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784338602,"nanos":527675155},"http":{"id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","method":"POST","headers":{":authority":"e2e-shared-b-0f7fdc.apps.9350eb27-4dac-44a9-b3ab-b96d485b94fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-0f7fdc/rate-test-model-0f7fdc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oSpt3fVuQWVQnmQj_EkefmSIyyXS6TfbiDWgyRZ6fxF3F9OVRfkYqb4zBsn6"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oSpt3fVuQWVQnmQj_EkefmSIyyXS6TfbiDWgyRZ6fxF3F9OVRfkYqb4zBsn6\"}"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c75e165f-5e2d-4e28-b9a3-b62d40f0b0a6","keyName":"e2e-rate-b-19aaea","subscription":"e2e-rate-iso-b-19aaea","tenant":"e2e-shared-b-0f7fdc","userId":"c75e165f-5e2d-4e28-b9a3-b62d40f0b0a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-0f7fdc/rate-test-model-0f7fdc\",\"requestedSubscription\":\"e2e-rate-iso-b-19aaea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0f7fdc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0f7fdc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-19aaea","namespace":"ai-tenant-e2e-shared-b-0f7fdc","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0f7fdc/rate-test-model-0f7fdc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0f7fdc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-19aaea"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c75e165f-5e2d-4e28-b9a3-b62d40f0b0a6","keyName":"e2e-rate-b-19aaea","selected_subscription":"e2e-rate-iso-b-19aaea","selected_subscription_key":"ai-tenant-e2e-shared-b-0f7fdc/e2e-rate-iso-b-19aaea@ai-tenant-e2e-shared-b-0f7fdc/rate-test-model-0f7fdc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0f7fdc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-19aaea","namespace":"ai-tenant-e2e-shared-b-0f7fdc","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-18T01:36:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fa01ed1-ab8a-4798-bfc7-d7a8325a2b39","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-18T01:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1e332df65713de42982d5c54f2d3affef971a68815d448a2be15e5b596a155b"} {"level":"info","ts":"2026-07-18T01:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffa0b976af06b40eab337690237577ee5ef78435b7d2c3e137121379d7ce9340"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ee0c1b7fe03223a6075f3f9a059036aae54d09cbde3f9d46972b758479e6400"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33e0154b1f090eac43d21d7ec66f491aebf61826af9c5bfe84099b2beb25db25"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4ea851b58eac78d60a19e84e795bfb898666f4b65721ca763d2806bd23baac4"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/591bd4ef8766d69a4ec2ffa0a98dd6adb807ac7eff5b5c7204636aa706af4435"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb2bce5610587be6b4beca9e056245b6b4c25f2f6742a6b709daa0e15c1a98f2"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fab624c13c9cd4dad645c0ed998b9191e08618c26e3059422a1f7986011d850e"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58a32f7f8d1baa8d4587e727200cc4148f93a9b25f29206d79b800f060429772"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d2efdc40b8b41d93b7db2f88f607e116a6ed3ffdea3d74f77d026dcc672af3e"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c985321f1cbfce83dfa3c16ff3e532bdc0cbaff4b94ebf818b781c69fb3ce4bf"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aad8ec4330b824fe49c391f4f15d444f11776799f6701c24077b86875cf2235b"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1fe4f9162b0c2bcb5e9410d3175c60b10e2557081c1fffa284e0c911c4972a5"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97b575931087efb85d791cafcf3e84f2086dd9e9b94fd028d3ce4a1bc6c73692"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b76ffa4813df09a8963aa13391e547e90e571cf311a85310a9b53f071f8974de"} {"level":"info","ts":"2026-07-18T01:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eabe1eb71db041f37ea976b034645ab56d9730ec99818c0d5ed5bc15431ef417"} {"level":"info","ts":"2026-07-18T01:37:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d5a98c79ab8440984111fd9369fa87896dff12df974bf789400bd4f5940eff9"} {"level":"info","ts":"2026-07-18T01:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e25ba6e7e1e5901ca2d721c759963664020274f43f1979c978ba6399553d73b"} {"level":"info","ts":"2026-07-18T01:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84fb719ec8624df167029ffbf1294bee73a9b589ec3a1184c5ad92982e0ecbac"} {"level":"info","ts":"2026-07-18T01:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef10dcff3c90d2e09c664728b67342c9ff2ddb17e7319cd7b234156693640369"} {"level":"info","ts":"2026-07-18T01:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e12cccd8f442aa912451cd8a46a5e6e83b5e644beb0e8215f3d489c9baa3cf8"} {"level":"info","ts":"2026-07-18T01:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21e48a4c2e9412ddc655e5480e4918a7da0307dbdfb0f9abb08f1f7e64a7057e"} {"level":"info","ts":"2026-07-18T01:37:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bc79d56a2325653952b90465aeb2f515eed2432f098c2f29edabff2f0284c20"} {"level":"info","ts":"2026-07-18T01:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92908d6c7fead2a05ae4288fc41bda5974ecf7f71be0d0eb2162483608723e92"}