--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"info","ts":"2026-07-13T15:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d29f9bb79a2805508c70ec9aeb0eceb5758db55bc850df92373a66291fef56b2"} {"level":"info","ts":"2026-07-13T15:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2bcc59caf4e5de81a4070c53167f7ecc1ef4f0629517d9141e9d13f575085de"} {"level":"info","ts":"2026-07-13T15:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42a15205179b26f30fa9e56df39531f71eccb1577f15763b747f3912bdbc769b"} {"level":"info","ts":"2026-07-13T15:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72e0b7eb042bf12c14224158354fbfc5bfcb7d541c0447d3fbd5fc4ed5234604"} {"level":"info","ts":"2026-07-13T15:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2af74e5e104ba0591137942388299135ffa3cc81c97f6b998d03980c8a459021"} {"level":"info","ts":"2026-07-13T15:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bba464c2be73f97f0b292e485e34ef84343d67c620dba9a595fb56fcee86878c"} {"level":"info","ts":"2026-07-13T15:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a13b1b3882e26fae1e9aca8702d05451e11d65289f3c226f418ae67519140e8"} {"level":"info","ts":"2026-07-13T15:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63181635a8c3b255d7d4e859ba86c33cf158111b356acdfec67f294aba960273"} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3902297640b0ff305050132e0185d2f0bf584e4c822ed036589a6c374a6bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3902297640b0ff305050132e0185d2f0bf584e4c822ed036589a6c374a6bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3902297640b0ff305050132e0185d2f0bf584e4c822ed036589a6c374a6bc9"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c3902297640b0ff305050132e0185d2f0bf584e4c822ed036589a6c374a6bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c3902297640b0ff305050132e0185d2f0bf584e4c822ed036589a6c374a6bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c3902297640b0ff305050132e0185d2f0bf584e4c822ed036589a6c374a6bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c3902297640b0ff305050132e0185d2f0bf584e4c822ed036589a6c374a6bc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c3902297640b0ff305050132e0185d2f0bf584e4c822ed036589a6c374a6bc9"} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11472c5d227ebdc8b04750b0c36c6e023db9495b4a9e969d917b9bcd10984787"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11472c5d227ebdc8b04750b0c36c6e023db9495b4a9e969d917b9bcd10984787","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11472c5d227ebdc8b04750b0c36c6e023db9495b4a9e969d917b9bcd10984787"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd67e39e21f562af1dc4de03501aeb188452e1d21db335dc4447145c41864e3"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba89a10d395c17c3ef15aa453212dfb9ff7bf7c639dca3f25e9a2b9b1de9bd27"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11472c5d227ebdc8b04750b0c36c6e023db9495b4a9e969d917b9bcd10984787","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acd67e39e21f562af1dc4de03501aeb188452e1d21db335dc4447145c41864e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acd67e39e21f562af1dc4de03501aeb188452e1d21db335dc4447145c41864e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11472c5d227ebdc8b04750b0c36c6e023db9495b4a9e969d917b9bcd10984787"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acd67e39e21f562af1dc4de03501aeb188452e1d21db335dc4447145c41864e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba89a10d395c17c3ef15aa453212dfb9ff7bf7c639dca3f25e9a2b9b1de9bd27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba89a10d395c17c3ef15aa453212dfb9ff7bf7c639dca3f25e9a2b9b1de9bd27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acd67e39e21f562af1dc4de03501aeb188452e1d21db335dc4447145c41864e3"} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba89a10d395c17c3ef15aa453212dfb9ff7bf7c639dca3f25e9a2b9b1de9bd27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11472c5d227ebdc8b04750b0c36c6e023db9495b4a9e969d917b9bcd10984787","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acd67e39e21f562af1dc4de03501aeb188452e1d21db335dc4447145c41864e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba89a10d395c17c3ef15aa453212dfb9ff7bf7c639dca3f25e9a2b9b1de9bd27","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba89a10d395c17c3ef15aa453212dfb9ff7bf7c639dca3f25e9a2b9b1de9bd27"} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14"} {"level":"info","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2"} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec"} {"level":"info","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058"} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058"} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"} {"level":"error","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:33:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c25a126-144d-4860-8e99-023b6589f66d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38894","PortSpecifier":{"PortValue":38894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c25a126-144d-4860-8e99-023b6589f66d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c25a126-144d-4860-8e99-023b6589f66d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38894","PortSpecifier":{"PortValue":38894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956825,"nanos":412349496},"http":{"id":"2c25a126-144d-4860-8e99-023b6589f66d","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c25a126-144d-4860-8e99-023b6589f66d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c25a126-144d-4860-8e99-023b6589f66d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c25a126-144d-4860-8e99-023b6589f66d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c25a126-144d-4860-8e99-023b6589f66d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c25a126-144d-4860-8e99-023b6589f66d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c25a126-144d-4860-8e99-023b6589f66d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c25a126-144d-4860-8e99-023b6589f66d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c25a126-144d-4860-8e99-023b6589f66d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c25a126-144d-4860-8e99-023b6589f66d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c25a126-144d-4860-8e99-023b6589f66d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c25a126-144d-4860-8e99-023b6589f66d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33422","PortSpecifier":{"PortValue":33422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eabf8af9-4e89-4d8a-990e-495048820f8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33422","PortSpecifier":{"PortValue":33422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956825,"nanos":477466951},"http":{"id":"eabf8af9-4e89-4d8a-990e-495048820f8c","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/auth-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eabf8af9-4e89-4d8a-990e-495048820f8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38910","PortSpecifier":{"PortValue":38910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","method":"GET","path":"/maas-api/v1/api-keys/2a304066-d630-49fe-aad0-7219678523a6","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38910","PortSpecifier":{"PortValue":38910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956825,"nanos":541381260},"http":{"id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","method":"GET","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2a304066-d630-49fe-aad0-7219678523a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2a304066-d630-49fe-aad0-7219678523a6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65aa9287-00c1-43df-b631-3a10a7aa5eb5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33436","PortSpecifier":{"PortValue":33436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","method":"GET","path":"/maas-api/v1/api-keys/6d2f4ca6-ea38-434d-b2a3-ea9cf4e5805e","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33436","PortSpecifier":{"PortValue":33436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956825,"nanos":577912956},"http":{"id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","method":"GET","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6d2f4ca6-ea38-434d-b2a3-ea9cf4e5805e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6d2f4ca6-ea38-434d-b2a3-ea9cf4e5805e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/auth-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0151387b-22a5-97d0-afdc-989f5ecd5f17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47130","PortSpecifier":{"PortValue":47130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1085489c-5695-493c-a99b-2cfd34f9acee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47130","PortSpecifier":{"PortValue":47130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956844,"nanos":875432462},"http":{"id":"1085489c-5695-493c-a99b-2cfd34f9acee","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1085489c-5695-493c-a99b-2cfd34f9acee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40708","PortSpecifier":{"PortValue":40708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40708","PortSpecifier":{"PortValue":40708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956844,"nanos":916579775},"http":{"id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/auth-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1bdd5c3-b088-42e5-82dc-5583323e550e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47140","PortSpecifier":{"PortValue":47140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47140","PortSpecifier":{"PortValue":47140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956844,"nanos":957130953},"http":{"id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","method":"GET","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-l0J1K06xZaWiIqOf_klPMdHmDeGnEnErYWzxnZctXkvACGIk27D1pwhwiMkp"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-l0J1K06xZaWiIqOf_klPMdHmDeGnEnErYWzxnZctXkvACGIk27D1pwhwiMkp\"}"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d768635d-d5e7-45b8-a746-0df4b978b126","keyName":"e2e-auth-iso-a-f48515","subscription":"e2e-auth-iso-255cac","tenant":"e2e-shared-a-88b181","userId":"d768635d-d5e7-45b8-a746-0df4b978b126","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-255cac"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bb384e8-8fd3-4048-90d1-5a028689a4b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35730","PortSpecifier":{"PortValue":35730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"956bbeb0-1d35-488e-b233-87249ed96cde","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35730","PortSpecifier":{"PortValue":35730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956862,"nanos":139064138},"http":{"id":"956bbeb0-1d35-488e-b233-87249ed96cde","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"956bbeb0-1d35-488e-b233-87249ed96cde","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49766","PortSpecifier":{"PortValue":49766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49766","PortSpecifier":{"PortValue":49766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956862,"nanos":181329114},"http":{"id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/auth-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"917fd0f9-c99b-4501-9b78-5f308e6139a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49772","PortSpecifier":{"PortValue":49772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49772","PortSpecifier":{"PortValue":49772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956862,"nanos":220413483},"http":{"id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","method":"GET","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EGxr8NDx51UMeUye_AnPcWLPQG5LnmXuS3RfZQWP2IKfZCNhW3CAJkqSlZme"} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EGxr8NDx51UMeUye_AnPcWLPQG5LnmXuS3RfZQWP2IKfZCNhW3CAJkqSlZme\"}"} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-13T15:34:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebf2ca2a-b8f4-484d-865b-ad2eaf042fc1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53578","PortSpecifier":{"PortValue":53578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53578","PortSpecifier":{"PortValue":53578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956881,"nanos":542682652},"http":{"id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7debaa4-950f-48ae-9f2c-739fa6295ac8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44788","PortSpecifier":{"PortValue":44788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44788","PortSpecifier":{"PortValue":44788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956881,"nanos":583835418},"http":{"id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/auth-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3633a7af-c1d1-41ed-8459-8f9e8ede5d4f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53580","PortSpecifier":{"PortValue":53580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53580","PortSpecifier":{"PortValue":53580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956881,"nanos":624660004},"http":{"id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5ec1cf4-e832-4acd-887f-19841f35b6a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44792","PortSpecifier":{"PortValue":44792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a263179f-7265-4d39-a6f6-e8792337d26b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44792","PortSpecifier":{"PortValue":44792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956881,"nanos":667590968},"http":{"id":"a263179f-7265-4d39-a6f6-e8792337d26b","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/auth-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a263179f-7265-4d39-a6f6-e8792337d26b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42470","PortSpecifier":{"PortValue":42470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cce3210-79f5-4f7b-99be-171c928e2441","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42470","PortSpecifier":{"PortValue":42470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956898,"nanos":916474775},"http":{"id":"4cce3210-79f5-4f7b-99be-171c928e2441","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cce3210-79f5-4f7b-99be-171c928e2441","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44108","PortSpecifier":{"PortValue":44108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1b66d65-8564-454a-ab44-83bce68d09a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44108","PortSpecifier":{"PortValue":44108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956898,"nanos":956359686},"http":{"id":"f1b66d65-8564-454a-ab44-83bce68d09a0","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/auth-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1b66d65-8564-454a-ab44-83bce68d09a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44120","PortSpecifier":{"PortValue":44120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","method":"GET","path":"/maas-api/v1/api-keys/bb39b9bb-aabb-4862-a497-9ef157849c45","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44120","PortSpecifier":{"PortValue":44120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956898,"nanos":997879439},"http":{"id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","method":"GET","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bb39b9bb-aabb-4862-a497-9ef157849c45",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bb39b9bb-aabb-4862-a497-9ef157849c45",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/auth-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"575326c4-3a7e-46ad-85dc-fff6348eb5e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42478","PortSpecifier":{"PortValue":42478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","method":"GET","path":"/maas-api/v1/api-keys/bb39b9bb-aabb-4862-a497-9ef157849c45","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42478","PortSpecifier":{"PortValue":42478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956899,"nanos":36260108},"http":{"id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","method":"GET","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bb39b9bb-aabb-4862-a497-9ef157849c45",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bb39b9bb-aabb-4862-a497-9ef157849c45",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b064bdf5-6238-4bf7-b2df-175d9e7b2fb2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36242","PortSpecifier":{"PortValue":36242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36242","PortSpecifier":{"PortValue":36242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956916,"nanos":265634255},"http":{"id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb01ecd7-5df4-4926-ae82-5f5527e44c98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56430","PortSpecifier":{"PortValue":56430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56430","PortSpecifier":{"PortValue":56430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956916,"nanos":306191646},"http":{"id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/auth-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f73dfff-1df7-4cd2-9d22-2846ea346efe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35524","PortSpecifier":{"PortValue":35524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:35524","PortSpecifier":{"PortValue":35524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783956916,"nanos":345561702},"http":{"id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cdA5SocUi1kHO8Kn_n0rP7SZwKhyaUs30KBNWQhm6z8ZrjJrZIY4aZZdjqZN"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cdA5SocUi1kHO8Kn_n0rP7SZwKhyaUs30KBNWQhm6z8ZrjJrZIY4aZZdjqZN\"}"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8991d0a0-774f-49f7-9777-2e5a8fe1b55d","keyName":"e2e-auth-iso-a-212a83","subscription":"e2e-auth-iso-e7ab0d","tenant":"e2e-shared-a-88b181","userId":"8991d0a0-774f-49f7-9777-2e5a8fe1b55d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/auth-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e7ab0d"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39739fcc-9259-4405-b3a2-9fe1a1d12d6a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3141e0dd771bac5c20f932208e9793a94c157e137f7d46745f3e2b2cfe49b058"} {"level":"info","ts":"2026-07-13T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5959fff3084d22b8c53f79963122ef066bd536cf401787d593ac8bfc0dcb244"} {"level":"info","ts":"2026-07-13T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11472c5d227ebdc8b04750b0c36c6e023db9495b4a9e969d917b9bcd10984787"} {"level":"info","ts":"2026-07-13T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf57eb645e044c3671ed849e4f68b05ab827e94ac636e758e0956ae50f6d01e3"} {"level":"info","ts":"2026-07-13T15:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/766898b9eda91c62d859237aa4f876bed88f187793ce1c169b828be7708eaa19"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/467caf42f3b4f7a7c35eb14f58970c3bb8d4d014f85beaef461aa887280d0cde"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3290de8c49cef6ddd03c8fd015eb237d1804252ef523eafbe152cffc64d590b2"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c3902297640b0ff305050132e0185d2f0bf584e4c822ed036589a6c374a6bc9"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96f1e03dd6fc102d60d6916d3eba48790097f85cfc84470a332db6b9b482783c"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2975b7768e6d35ea618150a58ae54f7593bf88bda0868dc43a73fe093e9420ec"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acd67e39e21f562af1dc4de03501aeb188452e1d21db335dc4447145c41864e3"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a59fba92fba06b64ab7c428180925f9e9244a42127f61abdb71c0ef92bf2c832"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd5dc187a2127f6913a5f86c8bdc4403f420683e0cdd2d3e342d1752323ff083"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba89a10d395c17c3ef15aa453212dfb9ff7bf7c639dca3f25e9a2b9b1de9bd27"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/340979bfe5e0a6db909d02e352a347ecd8a176f2f0c9b6929334152148e7a94f"} {"level":"info","ts":"2026-07-13T15:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fc299d4123409ee83d1c27aee1e8108e8f96d1e7daa131a2f660fbb81311d14"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e"} {"level":"error","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"error","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"debug","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"} {"level":"debug","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"} {"level":"debug","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"} {"level":"debug","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"} {"level":"debug","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"info","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927"} {"level":"error","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"error","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065"} {"level":"info","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065"} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a"} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"error","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"error","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e"} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829"} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065"} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e"} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"info","ts":"2026-07-13T15:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927"} {"level":"info","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51798","PortSpecifier":{"PortValue":51798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b023fa3b-c0ed-4c49-969f-197005c19356","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51798","PortSpecifier":{"PortValue":51798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957000,"nanos":165578663},"http":{"id":"b023fa3b-c0ed-4c49-969f-197005c19356","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/sub-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b023fa3b-c0ed-4c49-969f-197005c19356","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38312","PortSpecifier":{"PortValue":38312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38312","PortSpecifier":{"PortValue":38312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957000,"nanos":210930749},"http":{"id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/sub-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd85f09a-eafc-43b7-8ee8-d973b91dc021","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51812","PortSpecifier":{"PortValue":51812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51812","PortSpecifier":{"PortValue":51812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957000,"nanos":256481926},"http":{"id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","method":"GET","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11KbBEgwA9GTd2sLV_Qp8UNZJIQYwPAhpWF91Nv55QzM3rlWmFAQO8WEtOz9D"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11KbBEgwA9GTd2sLV_Qp8UNZJIQYwPAhpWF91Nv55QzM3rlWmFAQO8WEtOz9D\"}"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ab36e4e-b86a-4fdd-a78a-b748fb735840","keyName":"e2e-sub-iso-61488b","subscription":"e2e-a-only-f6a393","tenant":"e2e-shared-a-88b181","userId":"7ab36e4e-b86a-4fdd-a78a-b748fb735840","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/sub-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f6a393"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30eac3ae-35eb-4d58-9eb6-04e6b2ecd35e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38314","PortSpecifier":{"PortValue":38314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38314","PortSpecifier":{"PortValue":38314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957000,"nanos":298877931},"http":{"id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","method":"GET","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CNG15ZNmAT3R7w4b_IjOrEE38q953988wA1FUuNVM9C80UJTao3ZwyJIode1"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CNG15ZNmAT3R7w4b_IjOrEE38q953988wA1FUuNVM9C80UJTao3ZwyJIode1\"}"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1456f343-b437-4512-8030-597cf558b308","keyName":"e2e-sub-iso-852fdc","subscription":"e2e-b-only-f6a393","tenant":"e2e-shared-b-450dce","userId":"1456f343-b437-4512-8030-597cf558b308","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/sub-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f6a393"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90aaac8b-8d81-4ef4-92e2-91101d467d38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45522","PortSpecifier":{"PortValue":45522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67156c73-3bf1-4beb-92fb-e873695d0faa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45522","PortSpecifier":{"PortValue":45522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957018,"nanos":973335017},"http":{"id":"67156c73-3bf1-4beb-92fb-e873695d0faa","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/sub-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:36:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67156c73-3bf1-4beb-92fb-e873695d0faa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf634d07-6bca-474c-8490-443301ab0372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46086","PortSpecifier":{"PortValue":46086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf634d07-6bca-474c-8490-443301ab0372","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf634d07-6bca-474c-8490-443301ab0372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46086","PortSpecifier":{"PortValue":46086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957019,"nanos":11289636},"http":{"id":"cf634d07-6bca-474c-8490-443301ab0372","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf634d07-6bca-474c-8490-443301ab0372","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf634d07-6bca-474c-8490-443301ab0372","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf634d07-6bca-474c-8490-443301ab0372","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf634d07-6bca-474c-8490-443301ab0372","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf634d07-6bca-474c-8490-443301ab0372","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf634d07-6bca-474c-8490-443301ab0372","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/sub-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf634d07-6bca-474c-8490-443301ab0372","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf634d07-6bca-474c-8490-443301ab0372","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf634d07-6bca-474c-8490-443301ab0372","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf634d07-6bca-474c-8490-443301ab0372","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf634d07-6bca-474c-8490-443301ab0372","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45532","PortSpecifier":{"PortValue":45532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50704705-3731-4d7c-8581-91ea10c0cd91","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45532","PortSpecifier":{"PortValue":45532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957019,"nanos":49424258},"http":{"id":"50704705-3731-4d7c-8581-91ea10c0cd91","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QbGDwuiqayol6APE_C7H36fd4y09jcA10uC4qbxEcG2NP4BJ3XevGia9EdqE"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QbGDwuiqayol6APE_C7H36fd4y09jcA10uC4qbxEcG2NP4BJ3XevGia9EdqE\"}"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7047461b-c4bd-444b-8079-856cf69f7d55","keyName":"e2e-sub-iso-abc3ab","subscription":"e2e-shared-sub-53ebf3","tenant":"e2e-shared-a-88b181","userId":"7047461b-c4bd-444b-8079-856cf69f7d55","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/sub-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-53ebf3"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50704705-3731-4d7c-8581-91ea10c0cd91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65dfc72f-c741-434c-961e-46299809d479","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46098","PortSpecifier":{"PortValue":46098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65dfc72f-c741-434c-961e-46299809d479","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65dfc72f-c741-434c-961e-46299809d479","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46098","PortSpecifier":{"PortValue":46098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957019,"nanos":77499650},"http":{"id":"65dfc72f-c741-434c-961e-46299809d479","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65dfc72f-c741-434c-961e-46299809d479","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BciCt7XLdgPzwPI0_U91doXIGMYoxaCPqYvGRKKNMhsrXmhIGPcY6iFHmcbH"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65dfc72f-c741-434c-961e-46299809d479","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BciCt7XLdgPzwPI0_U91doXIGMYoxaCPqYvGRKKNMhsrXmhIGPcY6iFHmcbH\"}"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65dfc72f-c741-434c-961e-46299809d479","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6463c0f5-e909-45dc-9d06-19eeff0fd6a6","keyName":"e2e-sub-iso-77d498","subscription":"e2e-shared-sub-53ebf3","tenant":"e2e-shared-b-450dce","userId":"6463c0f5-e909-45dc-9d06-19eeff0fd6a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65dfc72f-c741-434c-961e-46299809d479","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65dfc72f-c741-434c-961e-46299809d479","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65dfc72f-c741-434c-961e-46299809d479","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65dfc72f-c741-434c-961e-46299809d479","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/sub-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65dfc72f-c741-434c-961e-46299809d479","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65dfc72f-c741-434c-961e-46299809d479","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-53ebf3"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65dfc72f-c741-434c-961e-46299809d479","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65dfc72f-c741-434c-961e-46299809d479","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65dfc72f-c741-434c-961e-46299809d479","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:36:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65dfc72f-c741-434c-961e-46299809d479","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:37:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d068892d41b264441aa6acf5e5a4b4ad507b5a6d8ce07ca921b3f4c634acaf85"} {"level":"info","ts":"2026-07-13T15:37:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03c65bc17271ed2a4f1adfc19e5d49244690ed56cd8eed835894f970cd260a79"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782007bc62cbf433bd1b2734e6f505aa9a5a28f26f21cdae34cf84f6a1da2065"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7a8d386391e603c200fee45488054082dd779d020052bc91c5b244fcdab6829"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fafa032ffaf5b5721bc4cbb75330a71fbbdbaf1001dd1926dd27b546d498a5a4"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf5dc51e98c4f1f02ec9faa7115a36f4e9f4a03c514b4015de225a99332f5913"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/836c5b020e1dbe1d62e1a41648c1d26ffe5fcfc316e9282c0b6578d7424ad2fb"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c25f2b7a4be4b3e41eb3a90235cfa4715d02a4c2c3b6f7b2dbd2ce9d990d927"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1ae2085e09d7cdcefca46ad44627c8d65bebc952a07e9db50d0c65e486427e"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f69eea1b37e99ec294549b89470f8da95fb74601de6ff44f6996f3aa4b7d00a"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/063898cd5c529f57c6f7c7b31f57b6e51b4137a15e099191359a7b1bba2f18bc"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01b404bc3bdb1a538df81e5910fba5b22207723682f193cf59b78a1f56e1ade3"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7261bfa1cafec819465b14d85dd237114a15d266c804c76c2c5ad36b85921357"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e72a9b8c989846d6cf118d8f9eab27a0489d24c003ba5a059726b0baa0c3863"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dde73b1ab162c922c2a00f5b0dfa405bc6b0c9dbfab3661ffb46ef5b91a7f375"} {"level":"info","ts":"2026-07-13T15:37:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5d7996b5da7d3412dcead7df58050ad1be52d0d01ffac0bd25b41c7a8333e9e"} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57"} {"level":"debug","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"} {"level":"error","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0"} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0"} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0"} {"level":"debug","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"} {"level":"info","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"} {"level":"info","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"} {"level":"debug","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe"} {"level":"error","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"error","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"} {"level":"error","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"} {"level":"debug","ts":"2026-07-13T15:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"} {"level":"debug","ts":"2026-07-13T15:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"} {"level":"debug","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"} {"level":"debug","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"} {"level":"debug","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"} {"level":"debug","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a"} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0"} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07"} {"level":"debug","ts":"2026-07-13T15:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe"} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57"} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe"} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T15:38:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"} {"level":"debug","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d"} {"level":"info","ts":"2026-07-13T15:38:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"} {"level":"info","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38122","PortSpecifier":{"PortValue":38122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38122","PortSpecifier":{"PortValue":38122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957090,"nanos":230428123},"http":{"id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b79e12e-c458-4cce-a4e8-10ee80decb07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40434","PortSpecifier":{"PortValue":40434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a77644b4-aba1-4047-8856-b7a372cdc39d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40434","PortSpecifier":{"PortValue":40434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957090,"nanos":277543193},"http":{"id":"a77644b4-aba1-4047-8856-b7a372cdc39d","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/rate-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a77644b4-aba1-4047-8856-b7a372cdc39d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38134","PortSpecifier":{"PortValue":38134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","method":"POST","path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38134","PortSpecifier":{"PortValue":38134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957090,"nanos":321430313},"http":{"id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kHS5kIfWG034X7lQ_GmqpFW5nVIBgzgL6DFDtXLUBWA4NAajs25uJpZk6beN"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kHS5kIfWG034X7lQ_GmqpFW5nVIBgzgL6DFDtXLUBWA4NAajs25uJpZk6beN\"}"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6bde980-5102-40ee-a539-cfcf2fa66c28","keyName":"e2e-rate-a-29bccf","subscription":"e2e-rate-iso-a-29bccf","tenant":"e2e-shared-a-88b181","userId":"b6bde980-5102-40ee-a539-cfcf2fa66c28","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\",\"requestedSubscription\":\"e2e-rate-iso-a-29bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29bccf","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29bccf"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b6bde980-5102-40ee-a539-cfcf2fa66c28","keyName":"e2e-rate-a-29bccf","selected_subscription":"e2e-rate-iso-a-29bccf","selected_subscription_key":"ai-tenant-e2e-shared-a-88b181/e2e-rate-iso-a-29bccf@ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29bccf","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12edc144-413d-45e4-b2cb-ddbc2bff9d9f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38150","PortSpecifier":{"PortValue":38150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"507ce52a-c8db-4551-a69a-8e585dae7d29","method":"POST","path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38150","PortSpecifier":{"PortValue":38150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957091,"nanos":381161512},"http":{"id":"507ce52a-c8db-4551-a69a-8e585dae7d29","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kHS5kIfWG034X7lQ_GmqpFW5nVIBgzgL6DFDtXLUBWA4NAajs25uJpZk6beN"} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kHS5kIfWG034X7lQ_GmqpFW5nVIBgzgL6DFDtXLUBWA4NAajs25uJpZk6beN\"}"} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6bde980-5102-40ee-a539-cfcf2fa66c28","keyName":"e2e-rate-a-29bccf","subscription":"e2e-rate-iso-a-29bccf","tenant":"e2e-shared-a-88b181","userId":"b6bde980-5102-40ee-a539-cfcf2fa66c28","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\",\"requestedSubscription\":\"e2e-rate-iso-a-29bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29bccf","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29bccf"} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b6bde980-5102-40ee-a539-cfcf2fa66c28","keyName":"e2e-rate-a-29bccf","selected_subscription":"e2e-rate-iso-a-29bccf","selected_subscription_key":"ai-tenant-e2e-shared-a-88b181/e2e-rate-iso-a-29bccf@ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29bccf","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"507ce52a-c8db-4551-a69a-8e585dae7d29","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38160","PortSpecifier":{"PortValue":38160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4671d50-9e03-496e-ab34-6561dadb31ee","method":"POST","path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38160","PortSpecifier":{"PortValue":38160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957092,"nanos":421082844},"http":{"id":"b4671d50-9e03-496e-ab34-6561dadb31ee","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kHS5kIfWG034X7lQ_GmqpFW5nVIBgzgL6DFDtXLUBWA4NAajs25uJpZk6beN"} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kHS5kIfWG034X7lQ_GmqpFW5nVIBgzgL6DFDtXLUBWA4NAajs25uJpZk6beN\"}"} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6bde980-5102-40ee-a539-cfcf2fa66c28","keyName":"e2e-rate-a-29bccf","subscription":"e2e-rate-iso-a-29bccf","tenant":"e2e-shared-a-88b181","userId":"b6bde980-5102-40ee-a539-cfcf2fa66c28","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\",\"requestedSubscription\":\"e2e-rate-iso-a-29bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29bccf","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-29bccf"} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b6bde980-5102-40ee-a539-cfcf2fa66c28","keyName":"e2e-rate-a-29bccf","selected_subscription":"e2e-rate-iso-a-29bccf","selected_subscription_key":"ai-tenant-e2e-shared-a-88b181/e2e-rate-iso-a-29bccf@ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-29bccf","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4671d50-9e03-496e-ab34-6561dadb31ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44148","PortSpecifier":{"PortValue":44148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44148","PortSpecifier":{"PortValue":44148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957105,"nanos":429955643},"http":{"id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f3d7f19-50b4-4a5c-b012-831fc31c07b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59188","PortSpecifier":{"PortValue":59188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"648bb522-4118-4429-be3b-dd1e1902ce9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59188","PortSpecifier":{"PortValue":59188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957105,"nanos":469431737},"http":{"id":"648bb522-4118-4429-be3b-dd1e1902ce9e","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a834ef0d-470b-4349-840a-28a880eb95bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"]}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb999bb61bb9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5f49618b-dc0d-41b0-8db3-470fb086a4ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a834ef0d-470b-4349-840a-28a880eb95bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/rate-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"648bb522-4118-4429-be3b-dd1e1902ce9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44158","PortSpecifier":{"PortValue":44158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94ec87db-9698-4926-aeb9-68487b8e1312","method":"POST","path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44158","PortSpecifier":{"PortValue":44158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957105,"nanos":510374679},"http":{"id":"94ec87db-9698-4926-aeb9-68487b8e1312","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Tf5AtjK1GZOSsUeu_aQLMr8rV40LGGak6Ipz8HWdPR4QwH0GBq29pu3XchJe"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Tf5AtjK1GZOSsUeu_aQLMr8rV40LGGak6Ipz8HWdPR4QwH0GBq29pu3XchJe\"}"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79526033-ba72-47d4-9cfd-7292dcb1e4d9","keyName":"e2e-rate-a-49dc94","subscription":"e2e-rate-iso-a-49dc94","tenant":"e2e-shared-a-88b181","userId":"79526033-ba72-47d4-9cfd-7292dcb1e4d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\",\"requestedSubscription\":\"e2e-rate-iso-a-49dc94\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49dc94","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-49dc94"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79526033-ba72-47d4-9cfd-7292dcb1e4d9","keyName":"e2e-rate-a-49dc94","selected_subscription":"e2e-rate-iso-a-49dc94","selected_subscription_key":"ai-tenant-e2e-shared-a-88b181/e2e-rate-iso-a-49dc94@ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49dc94","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94ec87db-9698-4926-aeb9-68487b8e1312","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50436","PortSpecifier":{"PortValue":50436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","method":"POST","path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50436","PortSpecifier":{"PortValue":50436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957106,"nanos":552657536},"http":{"id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Tf5AtjK1GZOSsUeu_aQLMr8rV40LGGak6Ipz8HWdPR4QwH0GBq29pu3XchJe"} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Tf5AtjK1GZOSsUeu_aQLMr8rV40LGGak6Ipz8HWdPR4QwH0GBq29pu3XchJe\"}"} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79526033-ba72-47d4-9cfd-7292dcb1e4d9","keyName":"e2e-rate-a-49dc94","subscription":"e2e-rate-iso-a-49dc94","tenant":"e2e-shared-a-88b181","userId":"79526033-ba72-47d4-9cfd-7292dcb1e4d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\",\"requestedSubscription\":\"e2e-rate-iso-a-49dc94\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49dc94","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-49dc94"} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79526033-ba72-47d4-9cfd-7292dcb1e4d9","keyName":"e2e-rate-a-49dc94","selected_subscription":"e2e-rate-iso-a-49dc94","selected_subscription_key":"ai-tenant-e2e-shared-a-88b181/e2e-rate-iso-a-49dc94@ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49dc94","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a944fdb7-e487-48b3-b03d-4a80cc54aaf0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50448","PortSpecifier":{"PortValue":50448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3022f522-7952-40f3-b1fe-741ff2ef5207","method":"POST","path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions","host":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50448","PortSpecifier":{"PortValue":50448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957107,"nanos":598244130},"http":{"id":"3022f522-7952-40f3-b1fe-741ff2ef5207","method":"POST","headers":{":authority":"e2e-shared-a-88b181.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Tf5AtjK1GZOSsUeu_aQLMr8rV40LGGak6Ipz8HWdPR4QwH0GBq29pu3XchJe"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Tf5AtjK1GZOSsUeu_aQLMr8rV40LGGak6Ipz8HWdPR4QwH0GBq29pu3XchJe\"}"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79526033-ba72-47d4-9cfd-7292dcb1e4d9","keyName":"e2e-rate-a-49dc94","subscription":"e2e-rate-iso-a-49dc94","tenant":"e2e-shared-a-88b181","userId":"79526033-ba72-47d4-9cfd-7292dcb1e4d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\",\"requestedSubscription\":\"e2e-rate-iso-a-49dc94\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-88b181.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49dc94","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-49dc94"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79526033-ba72-47d4-9cfd-7292dcb1e4d9","keyName":"e2e-rate-a-49dc94","selected_subscription":"e2e-rate-iso-a-49dc94","selected_subscription_key":"ai-tenant-e2e-shared-a-88b181/e2e-rate-iso-a-49dc94@ai-tenant-e2e-shared-a-88b181/rate-test-model-88b181","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88b181","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-49dc94","namespace":"ai-tenant-e2e-shared-a-88b181","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3022f522-7952-40f3-b1fe-741ff2ef5207","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37222","PortSpecifier":{"PortValue":37222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d439280-d0fa-4e8c-807f-d0a603228452","method":"POST","path":"/ai-tenant-e2e-shared-b-450dce/rate-test-model-450dce/v1/completions","host":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37222","PortSpecifier":{"PortValue":37222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783957107,"nanos":647805376},"http":{"id":"0d439280-d0fa-4e8c-807f-d0a603228452","method":"POST","headers":{":authority":"e2e-shared-b-450dce.apps.ca13c71d-23ea-4ad1-a32b-bb999bb61bb9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-450dce/rate-test-model-450dce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JFqsAQ7PwdNxGfKa_VpyKzBQtAfKKZL4uS2zo3Nq2Ysj9IdZ3S8fy8oQ81Og"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JFqsAQ7PwdNxGfKa_VpyKzBQtAfKKZL4uS2zo3Nq2Ysj9IdZ3S8fy8oQ81Og\"}"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"25242d6e-6f3c-401f-9b9f-d8930bfef997","keyName":"e2e-rate-b-49dc94","subscription":"e2e-rate-iso-b-49dc94","tenant":"e2e-shared-b-450dce","userId":"25242d6e-6f3c-401f-9b9f-d8930bfef997","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-450dce/rate-test-model-450dce\",\"requestedSubscription\":\"e2e-rate-iso-b-49dc94\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-450dce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-450dce","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-49dc94","namespace":"ai-tenant-e2e-shared-b-450dce","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-450dce/rate-test-model-450dce\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-49dc94"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"25242d6e-6f3c-401f-9b9f-d8930bfef997","keyName":"e2e-rate-b-49dc94","selected_subscription":"e2e-rate-iso-b-49dc94","selected_subscription_key":"ai-tenant-e2e-shared-b-450dce/e2e-rate-iso-b-49dc94@ai-tenant-e2e-shared-b-450dce/rate-test-model-450dce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-450dce","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-49dc94","namespace":"ai-tenant-e2e-shared-b-450dce","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-13T15:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d439280-d0fa-4e8c-807f-d0a603228452","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-13T15:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f914001ed0ee70c1cdefa1cc5f0f3bdebb694f5240e68f9249caae0e66cc5c9"} {"level":"info","ts":"2026-07-13T15:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30d2f2970dbe7e7c193b0c3f506197b780e70087089dd49111b45983a3aa9a57"} {"level":"info","ts":"2026-07-13T15:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b228465d1cb60f8b0916a335f7aab38b4bb3a4b824632aba3b4e0a506211ff9"} {"level":"info","ts":"2026-07-13T15:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c6fda5903336b3cb9807848639dc6ea52e56404bab826a2a311f9688042e0c5"} {"level":"info","ts":"2026-07-13T15:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c861c1ffcc66f2d657c2e163d8693c9c797abc01782653156e0b313e05a7f8a"} {"level":"info","ts":"2026-07-13T15:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed17869b3fe529f88ebfd421790598bc61397b0bff4ab0b561697f8ac1db6ae7"} {"level":"info","ts":"2026-07-13T15:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df5951efc8ac34594263ea951d7dab4336fb8216167bb42cf5b3ac3f46c53371"} {"level":"info","ts":"2026-07-13T15:38:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/838f9b7f796e77dade41b3e17c7616ece1fafecd117d3894ba411ec80308a4b0"} {"level":"info","ts":"2026-07-13T15:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f37f2d729c7e5fbb166d80dcbca1986afb313f44dafb8644c5b9d5894773c571"} {"level":"info","ts":"2026-07-13T15:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b8d804f690d22e381d1ea6a816f3bbdd1b48ad4839ecc4f2121b876d276ddfe"} {"level":"info","ts":"2026-07-13T15:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd0dc1e5dafbd5a9349918c1d8f2fc83cb0757215b71d1e41d8e731b5353ade"} {"level":"info","ts":"2026-07-13T15:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94e37cb5abdcc34b7a399427360160b5db6597fde81eb22943b6cb8cf73c37ca"} {"level":"info","ts":"2026-07-13T15:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05e92814a15db43b0f5a639f51249fcf532d5e9ff5cf231f229fdf012d0973e0"} {"level":"info","ts":"2026-07-13T15:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be39806dde457aa10cf74cd3eecebb4b47fbd79e64c77017ab9def5002d9082d"} {"level":"info","ts":"2026-07-13T15:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a25bb5cb97baedb58cd9b0ce43dac67b4ac13936df63b12546225c69f0096208"} {"level":"info","ts":"2026-07-13T15:38:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24fdf19dd6af49085108b4fee74e518e9cb5e325f62f37dedb99b0e22169050f"} {"level":"info","ts":"2026-07-13T15:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ee3fab4396a2691f6a1473ed1d9fff086bd63f85bd530e5753350e9c04148fe"} {"level":"info","ts":"2026-07-13T15:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd3ab72a3fb09733bf6055ebeb9ee779411ff3d6648e8497d57b3f2d6e586ed4"} {"level":"info","ts":"2026-07-13T15:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1037df4dfbd3167ecfcd113a310fe063ccfc0be4359e3a93bb3483d673459747"} {"level":"info","ts":"2026-07-13T15:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6da2222c52b4331e783df5be7035e1cfc2d4f513ee00dbdef5e5286ab93cef4e"} {"level":"info","ts":"2026-07-13T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b761dc8de6fae0ece9ad97cd7a09abfda4f8d474120538303a727041ca1b2f4b"} {"level":"info","ts":"2026-07-13T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/492d1b2c8e68d3f9ec80e4e67a6751958015078537eaf54a766523dd8636beb1"} {"level":"info","ts":"2026-07-13T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57874a0b88e3232afe59286cffad9012150c9552a812a5a1a016bce04a552e07"} {"level":"info","ts":"2026-07-13T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb9e92ebf6d1cbfc831ddb12601a178095b361a53005c57fe6f77ecb6d062e81"}